| Название | https://github.com/exelban Stats < v2.11.22 Local Privilege Escalation |
|---|
| Описание | The Stats application is vulnerable to a local privilege escalation due to the insecure implementation of its XPC service. The XPC server does not enforce client validation, and exposed methods are vulnerable to multiple command injection vulnerabilities. As a result, any client can connect to the XPC server and call vulnerable methods to execute arbitrary command as root. |
|---|
| Источник | ⚠️ https://winslow1984.com/books/cve-collection/page/stats-v21122-local-privilege-escalation |
|---|
| Пользователь | winslow1984 (UID 79140) |
|---|
| Представление | 01.01.2025 23:02 (2 лет назад) |
|---|
| Модерация | 11.01.2025 20:17 (10 days later) |
|---|
| Статус | принято |
|---|
| Запись VulDB | 291269 [exelban stats до 2.11.21 XPC Service shouldAcceptNewConnection эскалация привилегий] |
|---|
| Баллы | 18 |
|---|