Design/Logic Flaw

A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image .tar file which contains symbolic links. The vulnerability is limited to the command oc image extract. If a symbolic link is first...

CVE-2020-27833

CVE-2020-27833 describes a Zip Slip flaw in the oc binary from openshift-clients where an arbitrary file write can be achieved when processing a specially crafted tar image via oc image extract. The root cause is symlinks inside the tarball that bypass the tar’s path checks, enabling links to esc...

CVE-2020-27833

A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image .tar file which contains symbolic links. The vulnerability is limited to the command oc image extract. If a symbolic link is first...