Skip to content
OpenAdvisories

Weakness (CWE)

CWE-363: Race Condition Enabling Link Following

Base Draft

The product checks the status of a file or directory before accessing it, which produces a race condition in which the file can be replaced with a link before the access is performed, causing the product to access the wrong file.

Source: MITRE CWE-363

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2024-27102

    Improper isolation of server file access in github.com/pterodactyl/wings

    Wings is the server control plane for Pterodactyl Panel. This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can potentially be used to access files and directories on the host system. The full scope of impact is exactl…

    pterodactyl wings github.com/pterodactyl/wings Go