EUVD-2020-7880

Malware in sbrugna...

CVE-2020-15908

CVE-2020-15908 affects Cauldron cbang (aka C-Bang or C!) prior to version 1.6.0. The issue is a Directory Traversal in TarFileReader.cpp during extraction of TAR archives. CVSS metrics indicate CVSS‑3.1 base score 7.5 (HIGH) with network exposure, no privileges required, and no user interaction. ...