CVE-2025-23394

Description

A UNIX Symbolic Link (Symlink) Following vulnerability in openSUSE Tumbleweed cyrus-imapd allows escalation from cyrus to root.This issue affects openSUSE Tumbleweed cyrus-imapd before 3.8.4-2.1.

Reserved 2025-01-15 | Published 2025-05-26 | Updated 2025-05-27 | Assigner suse

Problem types

CWE-61: UNIX Symbolic Link (Symlink) Following

Product status

Default status
unaffected

? before 3.8.4-2.1
affected

Credits

Matthias Gerstner, SUSE finder

References

bugzilla.suse.com/show_bug.cgi?id=CVE-2025-23394

cve.org (CVE-2025-23394)

nvd.nist.gov (CVE-2025-23394)

Download JSON