Lucene search
+L

1 matches found

OSV
OSV
added 2024/01/31 10:39 p.m.18 views

GHSA-HPXR-W9W7-G4GV stereoscope vulnerable to tar path traversal when processing OCI tar archives

Impact It is possible to craft an OCI tar archive that, when stereoscope attempts to unarchive the contents, will result in writing to paths outside of the unarchive temporary directory. Specifically, use of github.com/anchore/stereoscope/pkg/file.UntarToDirectory function, the...

5.3CVSS7AI score0.00393EPSS
SaveExploits0References4
Rows per page
Query Builder