Lucene search
Veracode Vulnerability DatabaseVERACODE:39193HistoryFeb 10, 2023 - 5:24 a.m.
Arbitrary File Write
2023-02-1005:24:28
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
arbitrary file write
github.com/openshift/source-to-image
improper input validation
zip slip
0.001 Low
EPSS
Percentile
40.1%
github.com/openshift/source-to-image is vulnerable to Arbitrary File Write. The vulnerability exists due to the improper input validation in tar.go, which allows an attacker to overwrite files outside of the working directory via a Zip Slip.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/openshift/source-to-image | le | v1.1.9 | |
| github.com/openshift/source-to-image | le | v1.1.9 |
Related
osv
osv
CVE-2018-1103
2018-06-12 15:29:00
cve
cve
CVE-2018-1103
2018-06-12 15:29:00
prion
prion
Input validation
2018-06-12 15:29:00
nvd
nvd
CVE-2018-1103
2018-06-12 15:29:00
github
github
redhatcve
redhatcve
CVE-2018-1103
2018-06-12 07:19:22
cvelist
cvelist
CVE-2018-1103
2018-06-12 15:00:00