2024-12-15

gitingest before 9996a06 mishandles symbolic links that point outside of the base directory. Rated medium severity (CVSS 5.5), this vulnerability is remotely exploitable. No vendor patch available.

Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.6.0. Rated medium severity (CVSS 5.1), this vulnerability is low attack complexity. No vendor patch available.