Lucene search

K
rustsecRustsecRUSTSEC-2022-0088
HistoryAug 07, 2022 - 12:00 p.m.

`tauri`'s `readDir` endpoint allows possible enumeration outside of filesystem scope

2022-08-0712:00:00
rustsec.org
8

0.001 Low

EPSS

Percentile

42.3%

It is possible for readDir to incorrectly enumerate files from a symlinked directory if called recursively when specifying an empty string for the dir parameter as outlined in this issue.

This is corrected in this PR by checking if a directory is a symlink before reading from it.

CPENameOperatorVersion
taurilt1.0.6

0.001 Low

EPSS

Percentile

42.3%

Related for RUSTSEC-2022-0088