cbcvebase.
CVE-2013-1888
published 2013-08-17

CVE-2013-1888: pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.

PriorityP410low2.1CVSS 2.0
AVLACLAuNCNIPAN
EPSS
0.37%
28.6th percentile
pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.

Affected

6 ranges
VendorProductVersion rangeFixed in
debianpython-pip——
fedoraprojectfedora——
fedoraprojectfedora——
fedoraprojectfedora——
pypapip< 1.31.3
pypapip>= 0 < 1.31.3

CVSS provenance

nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
vendor_debian2.1LOW
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.