Lucene search
GoogleOSV:GHSA-9423-6C93-GPP8HistoryJun 23, 2021 - 5:13 p.m.
github.com/sassoftware/go-rpmutils Arbitrary File Write via Archive Extraction (Zip Slip)
2021-06-2317:13:29
Google
osv.dev
19
0.001 Low
EPSS
Percentile
40.1%
The CPIO extraction functionality doesn’t sanitize the paths of the archived files for leading and non-leading .. which leads in file extraction outside of the current directory. Note, the fixing commit was applied to all affected versions which were re-released.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/sassoftware/go-rpmutils | lt | 0.1.0 |
Related
nvd
nvd
CVE-2020-7667
2020-06-24 12:15:12
github
github
osv
osv
CVE-2020-7667
2020-06-24 12:15:12
veracode
veracode
Arbitrary File Write
2020-06-25 03:10:06
prion
prion
Design/Logic Flaw
2020-06-24 12:15:00
cve
cve
CVE-2020-7667
2020-06-24 12:15:12
cvelist
cvelist
CVE-2020-7667 Arbitrary File Write via Archive Extraction (Zip Slip)
2020-06-24 00:00:00
ibm
ibm