3.3
Low
CVE-2022-0343 A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user…
Description
A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Perfetto Dev Scripts 24.2 | earliest → 24.2 | No fix stated |