description: xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.
problem types: Symbolic Link Following
affected:
{
product: xcfa
vendor: xcfa
versions:
status: affected, version: 4.3.8-1
}