Gource

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Gource records in CISA KEV

No Gource vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Gource · all components

TI-2010-02352 CVE-2010-2449 · GHSA-7v54-gcwf-r4xw

LOW 32

Gource through 0.26 logs to a predictable file name (/tmp/gource-$UID.tmp), enabling attackers to overwrite an arbitrary file via a symlink attack.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01702 Published 2019-11-07 No fix listed CWE-20