# CWE-61.

Every Advisory and CVE whose sources give the weakness CWE-61, newest first.

## Records, newest first (an older page)

- [samba: A symlink following vulnerability was found in Samba…](https://agentprime.io/advisories/CVE-2022-3592.md)
  `CVE-2022-3592` · CVE record: samba · CVSS 6.5 Medium · Not analysed yet · Published 12 Jan 2023 · Tags: CWE-61
- [binwalk vulnerable to UNIX Symbolic Link (Symlink) Following](https://agentprime.io/advisories/GHSA-8m3f-g62j-3vx8.md)
  `GHSA-8m3f-g62j-3vx8`, `CVE-2021-4287`, `PYSEC-2026-788` · PyPI `binwalk`: affected `<2.3.3`, fixed in `2.3.3` · CVSS 5.0 Medium · Not analysed yet · Published 27 Dec 2022 · Tags: Path traversal, CWE-61
- [Symlink following allows leaking out-of-bound manifests and JSON files from Argo CD repo-server](https://agentprime.io/advisories/GHSA-6gcg-hp2x-q54h.md)
  `GHSA-6gcg-hp2x-q54h`, `CVE-2022-24904`, `GO-2022-0453` · Go `github.com/argoproj/argo-cd/v2`: affected `<2.1.15 || >=2.2.0, <2.2.9 || >=2.3.0, <2.3.4`, fixed in `2.1.15`, `2.2.9`, `2.3.4` · CVSS 4.3 Medium · Not analysed yet · Published 23 May 2022 · Tags: Path traversal, CWE-61
- [Cisco IOS XE SD-WAN Software Arbitrary File Overwrite Vulnerability](https://agentprime.io/advisories/CVE-2021-1612.md)
  `CVE-2021-1612` · CVE record: Cisco Cisco IOS XE SD-WAN Software · CVSS 5.5 Medium · Not analysed yet · Published 23 Sept 2021 · Tags: CWE-61
- [@npmcli/arborist vulnerable to UNIX Symbolic Link (Symlink) Following](https://agentprime.io/advisories/GHSA-2h3h-q99f-3fhc.md)
  `GHSA-2h3h-q99f-3fhc`, `CVE-2021-39134` · npm `@npmcli/arborist`: affected `<2.8.2`, fixed in `2.8.2` · CVSS 8.2 High · Not analysed yet · Published 31 Aug 2021 · Tags: Path traversal, CWE-61, CWE-178
- [UNIX Symbolic Link (Symlink) Following in @npmcli/arborist](https://agentprime.io/advisories/GHSA-gmw6-94gg-2rc2.md)
  `GHSA-gmw6-94gg-2rc2`, `CVE-2021-39135` · npm `@npmcli/arborist`: affected `<2.8.2`, fixed in `2.8.2` · CVSS 8.2 High · Not analysed yet · Published 31 Aug 2021 · Tags: Path traversal, CWE-61
- [QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following](https://agentprime.io/advisories/CVE-2021-32518.md)
  `CVE-2021-32518` · CVE record: QSAN Storage Manager · CVSS 7.5 High · Not analysed yet · Published 7 Jul 2021 · Tags: CWE-61
- [QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileviewDoc function](https://agentprime.io/advisories/CVE-2021-32509.md)
  `CVE-2021-32509` · CVE record: QSAN Storage Manager · CVSS 6.5 Medium · Not analysed yet · Published 7 Jul 2021 · Tags: CWE-61
- [QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileStreaming function](https://agentprime.io/advisories/CVE-2021-32508.md)
  `CVE-2021-32508` · CVE record: QSAN Storage Manager · CVSS 6.5 Medium · Not analysed yet · Published 7 Jul 2021 · Tags: CWE-61
- [arpwatch: Local privilege escalation from runtime user to root](https://agentprime.io/advisories/CVE-2021-25321.md)
  `CVE-2021-25321` · CVE record: SUSE SUSE Linux Enterprise Server 11-SP4-LTSS and 4 more · CVSS 7.8 High · Not analysed yet · Published 30 Jun 2021 · Tags: CWE-61
- [apport process_report() arbitrary file write](https://agentprime.io/advisories/CVE-2021-32557.md)
  `CVE-2021-32557` · CVE record: Canonical apport · CVSS 5.2 Medium · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32555.md)
  `CVE-2021-32555` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32554.md)
  `CVE-2021-32554` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32553.md)
  `CVE-2021-32553` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32552.md)
  `CVE-2021-32552` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32551.md)
  `CVE-2021-32551` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32550.md)
  `CVE-2021-32550` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32549.md)
  `CVE-2021-32549` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32548.md)
  `CVE-2021-32548` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [apport read_file() function could follow maliciously constructed symbolic links](https://agentprime.io/advisories/CVE-2021-32547.md)
  `CVE-2021-32547` · CVE record: Canonical apport · CVSS 7.3 High · Not analysed yet · Published 12 Jun 2021 · Tags: Path traversal, CWE-61
- [python-HyperKitty: hyperkitty-permissions.sh used during %post allows local privilege escalation from hyperkitty user to root](https://agentprime.io/advisories/CVE-2021-25322.md)
  `CVE-2021-25322` · CVE record: openSUSE Leap 15.2 and 1 more · CVSS 6.8 Medium · Not analysed yet · Published 10 Jun 2021 · Tags: CWE-61
- [Private Tunnel: Private Tunnel installer for macOS version 3.0.1 and older versions may corrupt system…](https://agentprime.io/advisories/CVE-2020-15076.md)
  `CVE-2020-15076` · CVE record: Private Tunnel · No CVSS score · Not analysed yet · Published 26 May 2021 · Tags: CWE-61
- [OpenVPN Connect: OpenVPN Connect installer for macOS version 3.2.6 and older may corrupt system critical…](https://agentprime.io/advisories/CVE-2020-15075.md)
  `CVE-2020-15075` · CVE record: OpenVPN Connect · No CVSS score · Not analysed yet · Published 30 Mar 2021 · Tags: CWE-61
- [Cisco StarOS for Cisco ASR 5000 Series Routers Arbitrary File Read Vulnerability](https://agentprime.io/advisories/CVE-2021-1145.md)
  `CVE-2021-1145` · CVE record: Cisco Cisco ASR 5000 Series Software · CVSS 6.5 Medium · Not analysed yet · Published 13 Jan 2021 · Tags: CWE-61
- [kopano-python-services: Local privilege escalation from kopano to root in kopano-spamd subpackage](https://agentprime.io/advisories/CVE-2020-8014.md)
  `CVE-2020-8014` · CVE record: openSUSE openSUSE Leap 15.1 and 1 more · CVSS 7.7 High · Not analysed yet · Published 29 Jun 2020 · Tags: CWE-61
- [syslog-ng: Local privilege escalation from new to root in %post](https://agentprime.io/advisories/CVE-2020-8019.md)
  `CVE-2020-8019` · CVE record: SUSE SUSE Linux Enterprise Debuginfo 11-SP3 and 4 more · CVSS 7.7 High · Not analysed yet · Published 29 Jun 2020 · Tags: CWE-61
- [Arbitrary File Write in npm](https://agentprime.io/advisories/GHSA-m6cx-g6qm-p2cx.md)
  `GHSA-m6cx-g6qm-p2cx`, `CVE-2019-16775` · npm `npm`: affected `<6.13.3`, fixed in `6.13.3` · CVSS 7.7 High · Not analysed yet · Published 13 Dec 2019 · Tags: Path traversal, CWE-61
- [kubectl cp allows symlink directory traversal](https://agentprime.io/advisories/CVE-2019-11249.md)
  `CVE-2019-11249` · CVE record: Kubernetes Kubernetes · CVSS 4.8 Medium · Not analysed yet · Published 29 Aug 2019 · Tags: CWE-61
- [kubectl cp allows symlink directory traversal](https://agentprime.io/advisories/CVE-2019-11246.md)
  `CVE-2019-11246` · CVE record: Kubernetes Kubernetes · CVSS 6.4 Medium · Not analysed yet · Published 29 Aug 2019 · Tags: CWE-61
- [local privilege escalation in SUSE postgresql init script](https://agentprime.io/advisories/CVE-2017-14798.md)
  `CVE-2017-14798` · CVE record: suse postgresql-init · CVSS 7.3 High · Not analysed yet · Published 1 Mar 2018 · Tags: CWE-61

Newest: <https://agentprime.io/advisories/tag/cwe-61.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-61&cursor=WyIyMDIzLTA3LTI1VDE3OjIwOjQzLjAwMDAwMFoiLCJHSFNBLXdoM3AtZnBocC05aDJtIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-61/?cursor=WyIyMDIzLTA3LTI1VDE3OjIwOjQzLjAwMDAwMFoiLCJHSFNBLXdoM3AtZnBocC05aDJtIl0>. Everything for agents: <https://agentprime.io/llms.txt>.