8.4

CVE-2025-65807

Exploit
An issue in sd command v1.0.0 and before allows attackers to escalate privileges to root via a crafted command.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Chmln ≫ Sd Version <= 1.0.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.094
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
CISA-ADP 8.4 2.5 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-266 Incorrect Privilege Assignment

A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

https://github.com/chmln/sd
Product
https://gist.github.com/faabbi/827f10e144fdd342e13a3dd838902e83
Third Party Advisory
Exploit