Lucene search
Veracode Vulnerability DatabaseVERACODE:25703HistoryJun 18, 2020 - 5:55 a.m.
Directory Traversal
2020-06-1805:55:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
53.6%
github.com/helm/helm is vulnerable to directory traversal. A zip-slip vulnerability when installing Helm plugins from a tar archive over HTTP allows an attacker to overwrite arbitrary files which could potentially result in arbitrary code execution when system files are overwritten.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/helm/helm | le | 3.2.3 |
Related
redhatcve
redhatcve
CVE-2020-4053
2021-12-22 07:54:46
osv
osv
CVE-2020-4053
2020-06-16 22:15:10
BIT-helm-2020-4053
2024-03-06 10:54:38
Plugin archive directory traversal in Helm
2021-06-23 18:14:36
cve
cve
CVE-2020-4053
2020-06-16 22:15:10
gitlab
gitlab
cvelist
cvelist
CVE-2020-4053 Path Traversal in Helm Plugin Archive
2020-06-16 22:00:19
nvd
nvd
CVE-2020-4053
2020-06-16 22:15:10
github
github
Plugin archive directory traversal in Helm
2021-06-23 18:14:36
prion
prion
Path traversal
2020-06-16 22:15:00
altlinux
altlinux
Security fix for the ALT Linux 10 package helm version 3.4.1-alt1
2020-11-23 00:00:00