Wasmer Access Control Error Vulnerability

Wasmer is a Wasmer open source application that enables lightweight containers to run anywhere. An Access Control Error vulnerability exists in Wasmer 3.0.0 and later versions that stems from allowing Wasmer programs to access file systems outside of the sandbox...

Wasmer filesystem sandbox not enforced

Summary As of Wasmer version v4.2.3, Wasm programs can access the filesystem outside of the sandbox. Details https://github.com/wasmerio/wasmer/issues/4267 PoC A minimal Rust program: fn main let f = std::fs::OpenOptions::new .writetrue .createnewtrue .open"abc" .unwrap; This should be compiled...

GHSA-4MQ4-7RW3-VM5J Wasmer filesystem sandbox not enforced

Summary As of Wasmer version v4.2.3, Wasm programs can access the filesystem outside of the sandbox. Details https://github.com/wasmerio/wasmer/issues/4267 PoC A minimal Rust program: fn main let f = std::fs::OpenOptions::new .writetrue .createnewtrue .open"abc" .unwrap; This should be compiled...