Vulnerability Description
The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mode 0777 and 0775 respectively, exposing secrets to other local users. Additionally, the .kimlik file is written without symlink checks, allowing local attackers to overwrite arbitrary files. This can result in information disclosure and denial of service.
CVSS Score
HIGH
Related Weaknesses (CWE)
References
- https://github.com/nurisensoy/seffaflik
- https://github.com/nurisensoy/seffaflik/issues/3
- https://pypi.org/project/seffaflik/
FAQ
What is CVE-2025-61035?
CVE-2025-61035 is a vulnerability with a CVSS score of 7.7 (HIGH). The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created with mode 0777 and 0775 respectively, exp...
How severe is CVE-2025-61035?
CVE-2025-61035 has been rated HIGH with a CVSS base score of 7.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2025-61035?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.