2 results · Feed
-
Medium 5.5
Link Following in rply
python-rply before 0.7.4 insecurely creates temporary files.
-
Low —
RPLY Predictable Tmpfile Names Allows Cache Spoofing
The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.