CVEvulnerability
CVE-2023-3891
7.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-09-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.3 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-367
Description
Race condition in Lapce v0.2.8 allows an attacker to elevate privileges on the system
Affected configurations
• lapce lapce 0.2.8
Related
Weakness · CWE (1)
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition weakness
References
- https://fluidattacks.com/advisories/aerosmith Exploit, Third Party Advisory
- https://github.com/lapce/lapce/releases/tag/v0.3.0 github.com
- https://lapce.dev Product
- https://fluidattacks.com/advisories/aerosmith Exploit, Third Party Advisory
- https://lapce.dev Product