CVE-2022-41950: Execution with Unnecessary Privileges

November 22, 2022 (updated November 26, 2022)

super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta.

References

github.com/4ra1n/super-xray/releases/tag/0.3-beta
github.com/4ra1n/super-xray/security/advisories/GHSA-2g28-xrw6-fq5f
nvd.nist.gov/vuln/detail/CVE-2022-41950

Detect and mitigate CVE-2022-41950 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →