Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-7216
HistoryFeb 05, 2024 - 3:15 p.m.

Path traversal

2024-02-0515:15:00
PRIOn knowledge base
www.prio-n.com
3
path traversal
cpio utility
remote attackers
arbitrary directories
symlinks

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, this allows writing files in arbitrary directories through symlinks.

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.6%