[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fN2I5Z_nafT55BY6VMptN51b3_WTpICLBtt3fBdl1I3I":3,"g5a-risk:CVE-2013-1888":154},{"success":4,"data":5,"meta":152},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":32,"epssPercentile":27,"epssTimeSeries":33,"severity":34,"affectedProducts":35,"affectedProductsCount":52,"references":53,"referencesCount":95,"weaknesses":96,"weaknessesCount":104,"isActivelyExploited":30,"cisaInfo":27,"otxData":27,"relatedBlogPosts":105,"seoMetadata":106,"configurations":131,"relatedVendorCves":150,"notableEvents":151},"CVE-2013-1888","What is CVE-2013-1888?","pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the \u002Ftmp\u002Fpip-build temporary directory.","2013-08-17T06:54:57.357","2026-06-16T23:52:18.58",2.1,"AV:L\u002FAC:L\u002FAu:N\u002FC:N\u002FI:P\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":15,"CVSSMetricV2":16,"CVSSMetricV40":31},[],[],[17],{"Source":18,"Type":19,"CVSSData":20,"BaseSeverity":23,"ExploitabilityScore":28,"ImpactScore":29,"ACInsufInfo":30,"ObtainAllPrivilege":30,"ObtainUserPrivilege":30,"ObtainOtherPrivilege":30,"UserInteractionRequired":30},"nvd@nist.gov","Primary",{"Version":21,"VectorString":12,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":24,"IntegrityImpact":25,"AvailabilityImpact":24,"BaseScore":11,"BaseSeverity":26,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","LOCAL","LOW","NONE","PARTIAL","",null,3.9,2.9,false,[],0.00364,[32,32,32,32,32,32,32],"Low",[36,41,46,49],{"vendor":37,"product":38,"version":39,"criteria":40,"vulnerable":4},"pypa","pip","*","cpe:2.3:a:pypa:pip:*:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"fedoraproject","fedora","17","cpe:2.3:o:fedoraproject:fedora:17:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":47,"criteria":48,"vulnerable":4},"18","cpe:2.3:o:fedoraproject:fedora:18:*:*:*:*:*:*:*",{"vendor":42,"product":43,"version":50,"criteria":51,"vulnerable":4},"19","cpe:2.3:o:fedoraproject:fedora:19:*:*:*:*:*:*:*",4,[54,59,62,65,70,74,78,81,83,85,87,89,91,93],{"url":55,"source":56,"tags":57},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2013-May\u002F105952.html","Fedoraproject",[58],"Third Party Advisory",{"url":60,"source":56,"tags":61},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2013-May\u002F105989.html",[58],{"url":63,"source":56,"tags":64},"http:\u002F\u002Flists.fedoraproject.org\u002Fpipermail\u002Fpackage-announce\u002F2013-May\u002F106311.html",[58],{"url":66,"source":67,"tags":68},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2013\u002F03\u002F22\u002F10","Openwall",[69,58],"Mailing List",{"url":71,"source":72,"tags":73},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fissues\u002F725","GitHub",[58],{"url":75,"source":72,"tags":76},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F734\u002Ffiles",[77,58],"Patch",{"url":79,"source":72,"tags":80},"https:\u002F\u002Fgithub.com\u002Fpypa\u002Fpip\u002Fpull\u002F780\u002Ffiles",[77,58],{"url":55,"source":56,"tags":82},[58],{"url":60,"source":56,"tags":84},[58],{"url":63,"source":56,"tags":86},[58],{"url":66,"source":67,"tags":88},[69,58],{"url":71,"source":72,"tags":90},[58],{"url":75,"source":72,"tags":92},[77,58],{"url":79,"source":72,"tags":94},[77,58],14,[97],{"id":98,"name":99,"description":100,"extendedDescription":26,"status":101,"abstraction":102,"structure":103},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","Draft","Base","Simple",1,[],{"title":107,"metaDescription":108,"keywords":109,"canonicalUrl":110,"structuredData":111},"What is CVE-2013-1888? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2013-1888, a low severity cyber security vulnerability from 2013. pip before 1.3 allows local users to overwrite arbitrary file...","CVE-2013-1888, CVE-2013-1888 vulnerability, CVE-2013-1888 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2013, CVSS score, exploit, patch, remediation, pypa security, fedoraproject security, pip vulnerability, fedora vulnerability","\u002Fwhat-is\u002Fcve-2013-1888",{"@context":112,"@type":113,"headline":107,"description":108,"datePublished":9,"dateModified":10,"author":114,"publisher":118,"about":122,"mainEntityOfPage":126,"articleSection":129,"keywords":130},"https:\u002F\u002Fschema.org","TechArticle",{"@type":115,"name":116,"url":117},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":115,"name":116,"url":117,"logo":119},{"@type":120,"url":121},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":123,"name":6,"description":124,"additionalType":125},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":127,"@id":128},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2013-1888","Cybersecurity","CVE-2013-1888, CVE-2013-1888 vulnerability, CVE-2013-1888 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[132,140],{"Operator":27,"Negate":27,"Nodes":133},[134],{"Operator":135,"Negate":30,"CPEMatch":136},"OR",[137],{"Vulnerable":4,"Criteria":40,"MatchCriteriaID":138,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":139,"VersionEndIncluding":27},"F9CDA0B6-A92F-4407-ADBF-851066B02E7F","1.3",{"Operator":27,"Negate":27,"Nodes":141},[142],{"Operator":135,"Negate":30,"CPEMatch":143},[144,146,148],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"2DA9D861-3EAF-42F5-B0B6-A4CD7BDD6188",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":147,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"E14271AE-1309-48F3-B9C6-D7DEEC488279",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"5991814D-CA77-4C25-90D2-DB542B17E0AD",[],[],{"lastModified":10,"cacheTime":153,"version":21},1792372476484,{"score":155,"band":156,"action":157,"scoredAt":158},8,"Info","Track","2026-10-16T06:37:50.682262+00:00"]