EUVD-2021-0224

Malware in sbrugna...

CVE-2021-32061

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

GHSA-QPPG-V75C-R5FF S3Scanner allows Directory Traversal

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

S3Scanner allows Directory Traversal

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

Path Traversal

S3Scanner is vulnerable to path traversal. An attacker can save files outside the folder specified with --dump-dir via a crafted bucket when the ListBucketResult element contains special characters...

CVE-2021-32061

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

CVE-2021-32061

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

CVE-2021-32061

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

CVE-2021-32061

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

CVE-2021-32061

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...

PT-2021-19645

Name of the Vulnerable Software and Affected Versions: S3Scanner versions prior to 2.0.2 Description: The issue allows Directory Traversal via a crafted bucket. This can be demonstrated by a ../ substring in a ListBucketResult element. Recommendations: For versions prior to 2.0.2, update to versi...

CVE-2021-32061: Improper Limitation of a Pathname to a Restricted Directory

S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a ../ substring in a ListBucketResult element...