CVE-2023-0592

The CVE-2023-0592 entry affects the jefferson JFFS2 filesystem extractor. A path traversal vulnerability allows crafting malicious JFFS2 files to cause writes outside the extraction directory. Affected versions are prior to 0.4.1. Mitigation: update to 0.4.1 or later; as a temporary workaround, r...

CVE-2022-4885

CVE-2022-4885 affects sviehb/jefferson up to version 0.3. The vulnerability arises from code in src/scripts/jefferson enabling path traversal, with remote initiation and relatively high attack complexity. Upgrading to version 0.4 addresses the issue (patch identified as 53b3f2fc34af0bb32afbcee29d...