Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2x93-pf6j-8c9x

Опубликовано: 23 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 6.6

Описание

radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive containing a symlinked notes.txt file. Attackers can craft a .zrp archive with a symlinked notes.txt that bypasses directory confinement checks, allowing note operations to follow the symlink and access arbitrary files outside the dir.projects root directory.

radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive containing a symlinked notes.txt file. Attackers can craft a .zrp archive with a symlinked notes.txt that bypasses directory confinement checks, allowing note operations to follow the symlink and access arbitrary files outside the dir.projects root directory.

EPSS

Процентиль: 10%
0.00198
Низкий

6.9 Medium

CVSS4

6.6 Medium

CVSS3

Дефекты

CWE-22
CWE-59

Связанные уязвимости

CVSS3: 6.6
ubuntu
3 месяца назад

radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive containing a symlinked notes.txt file. Attackers can craft a .zrp archive with a symlinked notes.txt that bypasses directory confinement checks, allowing note operations to follow the symlink and access arbitrary files outside the dir.projects root directory.

CVSS3: 6.6
nvd
3 месяца назад

radare2 prior to 6.1.4 contains a path traversal vulnerability in its project notes handling that allows attackers to read or write files outside the configured project directory by importing a malicious .zrp archive containing a symlinked notes.txt file. Attackers can craft a .zrp archive with a symlinked notes.txt that bypasses directory confinement checks, allowing note operations to follow the symlink and access arbitrary files outside the dir.projects root directory.

CVSS3: 6.6
debian
3 месяца назад

radare2 prior to 6.1.4 contains a path traversal vulnerability in its ...

EPSS

Процентиль: 10%
0.00198
Низкий

6.9 Medium

CVSS4

6.6 Medium

CVSS3

Дефекты

CWE-22
CWE-59