4 matches found
Path Traversal
github.com/whyrusleeping/tar-utils is vulnerable to Path Traversal. The vulnerability exists because the elems parameter in the Sanitize function of extractor.go does not properly sanitize the relative file paths, allowing an attacker to write arbitrary files outside the expected directory...
9.1CVSS8.8AI score0.01023EPSS
SaveExploits0References3Affected Software1
20