Description
gather-messages.sh in Ampache 3.4.1 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/filelist temporary file.
Remediation
References
Related Vulnerabilities
WordPress Plugin AdRoll for WooCommerce Stores Unspecified Vulnerability (2.2.5)
WordPress Plugin Advanced Forms for ACF Pro Security Bypass (1.6.8)
Oracle JRE Insecure Storage of Sensitive Information Vulnerability (CVE-2024-21211)
Oracle JRE Uncontrolled Resource Consumption Vulnerability (CVE-2026-47021)
Atlassian Jira Exposure of Resource to Wrong Sphere Vulnerability (CVE-2021-39127)