Skip to content
OpenAdvisories

Package · Debian

flameshot

1 known vulnerabilities.

1 result · Feed

  • Medium 5.1

    Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"

    Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, creating a time-of-check to time-of-use race that allowed a local unprivileged attacke…