Weakness (CWE)
CWE-687: Function Call With Incorrectly Specified Argument Value
Variant Draft
The product calls a function, procedure, or routine, but the caller specifies an argument that contains the wrong value, which may lead to resultant weaknesses.
Source: MITRE CWE-687
1 result · Clear filters · Feed
-
Medium 5.0CVE-2025-22620 Public exploit
gix-worktree-state nonexclusive checkout sets executable files world-writable
gitoxide is an implementation of git written in Rust. Prior to 0.17.0, gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask will restrict them appropriately. But one of the strategies it uses to set permis…