Description (CNA)
bash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has a predictable name.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| magicmonty / bash-git-prompt | affected 2.6.1 through 2.7.1 |
CWE
CWE-377
References
ADP enrichment
No English description supplied.
No references supplied.