PT-2025-43142 · Undefined · Undefined

Published 2025-10-22 · Updated 2025-10-22 · CVE-2025-61035

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions seffaflik versions prior to 0.1.0

Description Incorrect default permissions are assigned to the .kimlik file (mode 0777) and the .seffaflik file (mode 0775), which exposes secrets to other local users. Furthermore, the .kimlik file is written without symlink checks, enabling local attackers to overwrite arbitrary files. This may lead to information disclosure and denial of service.

Recommendations Update to a version later than 0.0.9.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2025-61035

Affected Products

Undefined

References · 5

• https://osv.dev/vulnerability/CVE-2025-61035 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61035 · Security Note
• https://github.com/nurisensoy/seffaflik · Note
• https://github.com/nurisensoy/seffaflik/issues/3 · Note
• https://pypi.org/project/seffaflik · Note