Arbitrary File Write in cli
Affected versions of `cli` use predictable temporary file names. If an attacker can create a symbolic link at the location of one of these temporarly file names, the attacker can arbitrarily write to any file that the user which owns the `cli` process has permission to write to.Proof of ConceptBy creating Symbolic Links at the following locations, the target of the link can be written to.RecommendationUpdate to version 1.0.0 or later.