Lucene search
Veracode Vulnerability DatabaseVERACODE:31548HistoryAug 10, 2021 - 7:16 a.m.
Path Traversal
2021-08-1007:16:17
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.002 Low
EPSS
Percentile
61.7%
github.com/gen2brain/go-unarr is vulnerable to path traversal. The vulnerability exists because it does not check the contents of the archive, allowing an attacker to use ../ in a pathname within a TAR archive.By triggering the path traversal vulnerability, an attacker can store any file in any privileged place
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/gen2brain/go-unarr | le | v0.1.1 | |
| github.com/gen2brain/go-unarr | le | v0.1.1 |
References
Related
cnvd
cnvd
go-unarr directory traversal vulnerability
2021-08-10 00:00:00
cvelist
cvelist
CVE-2021-38197
2021-08-08 15:18:17
osv
osv
Tarslip in go-unarr
2021-09-01 18:32:02
CVE-2021-38197
2021-08-08 16:15:07
prion
prion
Directory traversal
2021-08-08 16:15:00
cve
cve
CVE-2021-38197
2021-08-08 16:15:07
github
github
Tarslip in go-unarr
2021-09-01 18:32:02
nvd
nvd
CVE-2021-38197
2021-08-08 16:15:07