Launchpad.net

CVE 2021-32557

It was discovered that the process_report() function in data/whoopsie-upload-all allowed arbitrary file writes via symlinks.

See the CVE page on Mitre.org for more details.