Lucene search
+L

1 matches found

OSV
OSV
added 2020/03/09 4:15 p.m.5 views

ALPINE-CVE-2020-1737

A flaw was found in Ansible 2.7.17 and prior, 2.8.9 and prior, and 2.9.6 and prior when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive...

7.8CVSS6.4AI score0.00362EPSS
SaveExploits0References1
Rows per page
Query Builder