cache.py in Suds 0.4, when tempdir is set to None, allows local users to redirect SOAP queries and possibly have other unspecified impact via a symlink attack on a cache file with a predictable name in /tmp/suds/.
CVSS Details
- CVSS 3.1 Base Score: 9.1
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade suds | Jul 30, 2024 | Sep 23, 2013 |
| Freebsd | — | Upgrade py310-sudsUpgrade py39-sudsUpgrade py38-sudsUpgrade py37-sudsUpgrade py311-suds | Dec 10, 2025 | Apr 9, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 27, 2013 |
| Suse | — | Upgrade python-suds | Dec 12, 2013 | Sep 23, 2013 |
| Ubuntu | — | Upgrade python-suds | Nov 8, 2024 | Sep 23, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub