CVE-2014-5260

MEDIUM · CVSS 6.3 EPSS 0.35%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2014-08-16 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2014-5260

Severity

MEDIUM

CVSS

6.3

EPSS

0.35%

Original Filing — NVD Description

The (1) mkxmltype and (2) mkdtskel scripts in XML-DT before 0.64 allow local users to overwrite arbitrary files via a symlink attack on a /tmp/_xml_##### temporary file.