2 matches found
Linux Distros Unpatched Vulnerability : CVE-2023-7216
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially...
5.3CVSS6.4AI score0.00899EPSS
SaveExploits1References3
CVE-2020-7667
In package github.com/sassoftware/go-rpmutils/cpio before version 0.1.0, the CPIO extraction functionality doesn't sanitize the paths of the archived files for leading and non-leading ".." which leads in file extraction outside of the current directory. Note: the fixing commit was applied to all...
7.5CVSS7.3AI score0.01602EPSS
SaveExploits1References3
20