{"uuid": "2b10b987-3a57-47bb-aed4-635d9e15e383", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2019-13228", "type": "seen", "source": "https://t.me/cveNotify/173", "content": "\ud83d\udea8 #CVE-2019-13228\ndeepin-clone before 1.1.3 uses a fixed path /tmp/repo.iso in the BootDoctor::fix() function to download an ISO file, and follows symlinks there. An unprivileged user can prepare a symlink attack there to create or over... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-13228\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2019-07-04T14:59:54.000000Z"}