CVE-2021-34422

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a file uploaded to a team folder. A malicious user could upload a file to a shared folder with a specially crafted file name which could allow a user to execute an application whi...

CVE-2021-34422 Path traversal of file names in Keybase Client for Windows

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a file uploaded to a team folder. A malicious user could upload a file to a shared folder with a specially crafted file name which could allow a user to execute an application whi...

CVE-2021-34422

The CVE-2021-34422 issue affects the Keybase Client for Windows prior to version 5.7.0, where a path traversal vulnerability exists in the file-name check when uploading to a team folder. A crafted filename in a shared/public folder could enable remote code execution on the host. Affected product...