https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 11:00:44 +0000 https://vulnerability.circl.lu/vuln/cve-2017-9780 <p>In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the world-writable location. In the case of the &#34;system helper&#34; component, files deployed as part of the app are owned by root, so in the worst case they could be setuid root.</p> <p>In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the world-writable location. In the case of the &#34;system helper&#34; component, files deployed as part of the app are owned by root, so in the worst case they could be setuid root.</p> https://vulnerability.circl.lu/vuln/cve-2017-9780