Lucene search
PRIOn knowledge basePRION:CVE-2020-7667HistoryJun 24, 2020 - 12:15 p.m.
Design/Logic Flaw
2020-06-2412:15:00
PRIOn knowledge base
www.prio-n.com
2
In package github.com/sassoftware/go-rpmutils/cpio before version 0.1.0, the CPIO extraction functionality doesn’t sanitize the paths of the archived files for leading and non-leading “…” which leads in file extraction outside of the current directory. Note: the fixing commit was applied to all affected versions which were re-released.
| CPE | Name | Operator | Version |
|---|---|---|---|
| go_rpm_utils | lt | 0.1.0 |
Related
cve
cve
CVE-2020-7667
2020-06-24 12:15:12
nvd
nvd
CVE-2020-7667
2020-06-24 12:15:12
github
github
osv
osv
github.com/sassoftware/go-rpmutils Arbitrary File Write via Archive Extraction (Zip Slip)
2021-06-23 17:13:29
CVE-2020-7667
2020-06-24 12:15:12
veracode
veracode
Arbitrary File Write
2020-06-25 03:10:06
cvelist
cvelist
CVE-2020-7667 Arbitrary File Write via Archive Extraction (Zip Slip)
2020-06-24 00:00:00
ibm
ibm