2 matches found
Directory traversal
tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to create or write to files outside the current directory via a crafted tar archive...
CVE-2020-15908
tar/TarFileReader.cpp in Cauldron cbang aka C-Bang or C! before 1.6.0 allows Directory Traversal during extraction from a TAR archive...