Lucene search
+L

1 matches found

OSV
OSV
added 2024/02/27 3:31 a.m.25 views

GHSA-33W6-HVMQ-GH4X diffoscope Path Traversal vulnerability

diffoscope before 256 allows directory traversal via an embedded filename in a GPG file. Contents of any file, such as ../.ssh/idrsa, may be disclosed to an attacker. This occurs because the value of the gpg --use-embedded-filenames option is trusted...

7.5CVSS7.2AI score0.00987EPSS
SaveExploits0References6
Rows per page
Query Builder