A UNIX Symbolic Link (Symlink) Following vulnerability in python-HyperKitty of openSUSE Leap 15.2, Factory allows local attackers to escalate privileges from the user hyperkitty or hyperkitty-admin to root.
CVSS 3.1HIGH 7.8·Local·Low privileges·No interaction·EPSS 0.00437·Published 2021-06-10·Fixed in 1.3.4-5.1CWE-61