CVE-2023-29465

Name of the Vulnerable Software and Affected Versions SageMath FlintQS version 1.0

Description The issue allows a local user to overwrite files with the privileges of a different user who is running SageMath FlintQS, due to its reliance on pathnames under TMPDIR, which is typically world-writable.

Recommendations For SageMath FlintQS version 1.0, consider restricting access to the TMPDIR to prevent unauthorized file overwrites until a patch is available. As a temporary workaround, restrict write access to the TMPDIR directory to minimize the risk of exploitation.