CVE-2020-11498

Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tundarwin.go or tunwindows.go. A user can also use Nebula to execute arbitrary code in the user's own context, e.g., for user-level persisten...

GO-2024-3156 CVE-2024-47219 in github.com/vesoft-inc/nebula

CVE-2024-47219 in github.com/vesoft-inc/nebula...

Remote Code Execution Via Path Traversal

github.com/slackhq/nebula is vulnerable to remote code execution via path traversal. Lack of handling of the user-provided unsafe routes in tundarwin.go or tunwindows.go allows an attacker to set a relative-path value and gain privileges of root-user to bypass security controls and to execute...