snap-confine as included in snapd prior to 2.39 did not guard against symlink races when performing the chdir() to the current working directory of the calling user, aka a "cwd restore permission bypass."
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
canonical snapd |