Description
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are executed as root, after v2rayL.service is restarted via Sudo.
Unscored
CVE-2020-10589
EUVD-2020-3040GHSA-6ppr-fg8v-vwjq
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains comma…
Published Mar 15, 2020 · Updated Aug 4, 2024 · Assigned by mitre