Posted by Ron E on Aug 26Chronicle Wire's FileMarshallableOut follows symbolic links when writing files in append mode. When ?append=true is enabled, the implementation opens the supplied output path directly using FileOutputStream(path, true) without preventing symbolic-link resolution. If an attacker can create or replace the expected output file with a symbolic link before the append operation occurs, the operating system resolves the link and Chronicle Wire...