Posted by Ron E on Aug 26 Chronicle Wire's FileMarshallableOut follows symbolic links when writing

files in append mode. When ?append=true is enabled, the implementation

opens the supplied output path directly using FileOutputStream(path, true)

without preventing symbolic-link resolution.

If an attacker can create or replace the expected output file with a

symbolic link before the append operation occurs, the operating system

resolves the link and Chronicle Wire...