Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-v9vx-4mxw-76j2

Опубликовано: 05 фев. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which could be utilized to run arbitrary commands on the target system.

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which could be utilized to run arbitrary commands on the target system.

EPSS

Процентиль: 40%
0.00178
Низкий

8.8 High

CVSS3

Дефекты

CWE-22
CWE-59

Связанные уязвимости

CVSS3: 5.3
ubuntu
около 2 лет назад

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files to be written in arbitrary directories through symlinks.

CVSS3: 5.3
redhat
около 2 лет назад

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files to be written in arbitrary directories through symlinks.

CVSS3: 5.3
nvd
около 2 лет назад

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files to be written in arbitrary directories through symlinks.

CVSS3: 5.3
debian
около 2 лет назад

A path traversal vulnerability was found in the CPIO utility. This iss ...

CVSS3: 8.8
fstec
около 2 лет назад

Уязвимость утилиты архивирования cpio операционных систем Red Hat Enterprise Linux, позволяющая нарушителю выполнить произвольные команды

EPSS

Процентиль: 40%
0.00178
Низкий

8.8 High

CVSS3

Дефекты

CWE-22
CWE-59