2 matches found
nanotar is vulnerable to path traversal in parseTar() and parseTarGzip()
nanotar through 0.2.0 has a path traversal vulnerability in parseTar and parseTarGzip that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containing path traversal sequence...
9.8CVSS5.8AI score0.00841EPSS
SaveExploits2References5Affected Software1
CVE-2025-69874
nanotar through 0.2.0 has a path traversal vulnerability in parseTar and parseTarGzip that allows remote attackers to write arbitrary files outside the intended extraction directory via a crafted tar archive containing path traversal sequence...
9.8CVSS0.00841EPSS
SaveExploits2References3
20