GNU Rush 1.7 does not properly drop privileges, which allows local users to read arbitrary files via the --lint option.
CVSS Score
4.9
EPSS Score
0.001
Published
2014-05-08