Lucene search
GoogleOSV:GHSA-75QF-WGFJ-V652HistoryMay 18, 2021 - 6:28 p.m.
github.com/u-root/u-root/pkg/tarutil Arbitrary File Write via Archive Extraction (Zip Slip)
2021-05-1818:28:03
Google
osv.dev
8
0.001 Low
EPSS
Percentile
40.1%
This affects all versions up to and including version 0.7.0 of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/u-root/u-root | lt | 0.9.0 |
Related
nvd
nvd
CVE-2020-7669
2020-09-01 14:15:14
github
github
cve
cve
CVE-2020-7669
2020-09-01 14:15:14
prion
prion
Path traversal
2020-09-01 14:15:00
veracode
veracode
Arbitrary File Write
2020-09-02 06:39:27
cvelist
cvelist
CVE-2020-7669 Arbitrary File Write via Archive Extraction (Zip Slip)
2020-09-01 00:00:00