CVE-2007-4462: PO4A

Low severity, CVSS 3.3. EPSS: 0.3% chance of exploitation in the next 30 days.

lib/Locale/Po4a/Po.pm in po4a before 0.32 allows local users to overwrite arbitrary files via a symlink attack on the gettextization.failed.po temporary file.

Affected products

• PO4A PO4A: up to and including 0.31

Published 2007-08-21. Last modified 2026-06-16.