Approved changes feed: RSS · Atom

cpe:2.3:a:v2rayl_project:v2rayl:2.1.3:*:*:*:*:*:*:*

part: a version: 2.1.3 update: *

VendorV2Rayl Project (11d048ea-a4f5-575b-8a51-cf7cf6ac4601)
ProductV2Rayl (1a95b66a-3b65-5c46-8b2a-abd39baf2baf)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jiangxufeng/v2rayl purl2cpe 2026-06-01 10:14:41.198248

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-10589 vulnerable 2026-06-08 05:16:35.326519 Details available
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/config.json is owned by a low-privileged user but contains commands that are executed as root, after v2rayL.service is restarted via Sudo.
Published: 2020-03-15T20:25:36.000Z
Updated: 2024-08-04T11:06:09.954Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10588 vulnerable 2026-06-08 05:16:35.326124 Details available
v2rayL 2.1.3 allows local users to achieve root access because /etc/v2rayL/add.sh and /etc/v2rayL/remove.sh are owned by a low-privileged user but execute as root via Sudo.
Published: 2020-03-15T20:25:10.000Z
Updated: 2024-08-04T11:06:10.111Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.