| 제목 | https://github.com/exelban Stats < v2.11.22 Local Privilege Escalation |
|---|
| 설명 | The Stats application is vulnerable to a local privilege escalation due to the insecure implementation of its XPC service. The XPC server does not enforce client validation, and exposed methods are vulnerable to multiple command injection vulnerabilities. As a result, any client can connect to the XPC server and call vulnerable methods to execute arbitrary command as root. |
|---|
| 원천 | ⚠️ https://winslow1984.com/books/cve-collection/page/stats-v21122-local-privilege-escalation |
|---|
| 사용자 | winslow1984 (UID 79140) |
|---|
| 제출 | 2025. 01. 01. PM 11:02 (2 연령 ago) |
|---|
| 모더레이션 | 2025. 01. 11. PM 08:17 (10 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 291269 [exelban stats 까지 2.11.21 XPC Service shouldAcceptNewConnection 권한 상승] |
|---|
| 포인트들 | 18 |
|---|