Lucene search
+L

1 matches found

OSV
OSV
added 2021/04/14 8:4 p.m.31 views

GO-2021-0099 Zip slip directory exploit in github.com/deislabs/oras

Due to improper path validation, using the github.com/deislabs/oras/pkg/content.FileStore content store may result in directory traversal during archive extraction, allowing a malicious archive to write paths to arbitrary paths that the process can write to...

7.7CVSS7.5AI score0.01448EPSS
SaveExploits0References1
Rows per page
Query Builder