Lucene search
China National Vulnerability DatabaseCNVD-2021-61413HistoryAug 10, 2021 - 12:00 a.m.
go-unarr directory traversal vulnerability
2021-08-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
4
0.002 Low
EPSS
Percentile
61.7%
go-unarr is an open source go language library for decompressing RAR, TAR, ZIP and 7z archives. go-unarr version 0.1.1 is vulnerable to a directory traversal vulnerability that could be exploited to write arbitrary files on the system via specially crafted TAR archives.
| CPE | Name | Operator | Version |
|---|---|---|---|
| go-unarr go-unarr | eq | 0.1.1 |
Related
cvelist
cvelist
CVE-2021-38197
2021-08-08 15:18:17
osv
osv
Tarslip in go-unarr
2021-09-01 18:32:02
CVE-2021-38197
2021-08-08 16:15:07
prion
prion
Directory traversal
2021-08-08 16:15:00
cve
cve
CVE-2021-38197
2021-08-08 16:15:07
github
github
Tarslip in go-unarr
2021-09-01 18:32:02
veracode
veracode
Path Traversal
2021-08-10 07:16:17
nvd
nvd
CVE-2021-38197
2021-08-08 16:15:07