A Reliance on Untrusted Inputs in a Security Decision... · CVE-2025-53882 · GitHub Advisory Database · GitHub

A Reliance on Untrusted Inputs in a Security Decision...

Critical severity Unreviewed Published Jul 23, 2025 to the GitHub Advisory Database • Updated Jul 31, 2025

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A Reliance on Untrusted Inputs in a Security Decision vulnerability in the logrotate configuration for openSUSEs mailman3 package allows potential escalation from mailman to rootThis issue affects openSUSE Tumbleweed: from ? before 3.3.10-2.1.

References

Published by the National Vulnerability Database

Jul 23, 2025

Published to the GitHub Advisory Database Jul 23, 2025

Last updated Jul 31, 2025

Weaknesses

CWE-273

Improper Check for Dropped Privileges

The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded. Learn more on MITRE.

CWE-807

Reliance on Untrusted Inputs in a Security Decision

The product uses a protection mechanism that relies on the existence or values of an input, but the input can be modified by an untrusted actor in a way that bypasses the protection mechanism. Learn more on MITRE.