CVE-2021-31997: A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users…

PriorityP338high7.8CVSS 3.1

AVLACLPRLUINSUCHIHAH

EPSS

0.34%

26.1th percentile

A UNIX Symbolic Link (Symlink) Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users postorius or postorius-admin to root. This issue affects: openSUSE Leap 15.2 python-postorius version 1.3.2-lp152.1.2 and prior versions. openSUSE Factory python-postorius version 1.3.4-2.1 and prior versions.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
debian	postorius	—	—
opensuse	factory	python-postorius – 1.3.4-2.1	—
opensuse	leap_15.2	python-postorius – 1.3.2-lp152.1.2	—
opensuse	python-postorius	< 1.3.2-lp152.1.2	1.3.2-lp152.1.2
opensuse	python-postorius	<= 1.3.4-2.1	—

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C

vendor_debian6.8LOW

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.