CVE-2022-1537
High
Description
file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user's .bashrc file or replace /etc/shadow file if the GruntJS user is root.
SeverityHigh
CVSS7.0
Exploit probability—
ProductGrunt
PublishedMay 10, 2022
First seenMay 10, 2022
Weakness typeCWE-367CWE-367
How to fix
Update
- gruntjs grunt1.5.3 or later
- grunt1.5.3 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gruntjs grunt | v < 1.5.3 | 1.5.3 |
| gruntnpm | v < 1.5.3 | 1.5.3 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.