CVE-2024-34528
WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creation.
- Update to 3.21.0
- Update to 3.21.3
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for wordops in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerability: 1
WordOps through 3.20.0 has a wo/cli/plugins/stack_pref.py TOCTOU race condition because the conf_path os.open does not use a mode parameter during file creation.
Check your installed stack and versions against the current vulnerability feeds.