Local users can execute commands as other users, and read other users files, through the filter command in the Elm elm-2.4 mail package using a symlink attack.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Elm |
Elm_development_group |
2.4 (including) |
2.4 (including) |
References