Netflix Hollow vulnerabilities

1 vulnerability

Known vulnerabilities in Netflix Hollow, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.4CVE-2021-28099com.netflix.hollowhollow+1
EPSS score
0.25%
In Netflix OSS Hollow, since the Files.exists(parent) is run before creating the directories, an attacker can pre-create these directories with wide permissions. Additionally, since an insecure source of randomness is used, the file names to be created can be deterministically calculated.