SABnzbd filesystem.renamer() Path Traversal

The vulnerability of the filesystem.renamer function in the SABnzbd news reader program is related to errors in handling relative pathnames for directories. Exploiting this vulnerability could allow a malicious actor to manipulate data integrity through the use of a malicious PAR2 file...

DEBIAN-CVE-2021-29488

SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround,...