CVE-2015-5705: Devscripts Devel Team Devscripts

High severity, CVSS 7.5. EPSS: 3.1% chance of exploitation in the next 30 days.

Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename.

Affected products

• Devscripts Devel Team Devscripts: up to and including 2.15.6
• Fedoraproject Fedora: version 21 only; version 22 only

Published 2017-09-06. Last modified 2026-06-17.