CVE-2023-29465

SageMath FlintQS 1.0 relies on pathnames under TMPDIR (typically world-writable), which (for example) allows a local user to overwrite files with the privileges of a different user (who is running FlintQS).

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS

0.24% chance of exploitation in the next 30 days, 16th percentile

Published

2023-04-06

Updated

2025-02-12

Proof-of-concept exploits (1)

• sagemath/FlintQS/issues/3

References

• CVE Record
• NVD entry

Related

• CVE-2023-2946
• CVE-2023-2947
• CVE-2023-2945
• CVE-2023-29478
• CVE-2023-2944
• CVE-2023-2948