Lucene search

K
osvGoogleOSV:USN-5283-1
HistoryFeb 11, 2022 - 2:43 p.m.

node-tar vulnerability

2022-02-1114:43:32
Google
osv.dev
14
node.js
tar
directory traversal
vulnerability
software

AI Score

6.8

Confidence

Low

EPSS

0.007

Percentile

80.2%

It was discovered that Tar for Node.js did not properly sanitize path inputs.
An attacker could possibly use this issue to read arbitrary files, resulting
in a directory traversal attack.