Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xcgv-8mv7-v8c7

Опубликовано: 08 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

EPSS

Процентиль: 14%
0.00232
Низкий

7.8 High

CVSS3

Дефекты

CWE-61

Связанные уязвимости

CVSS3: 7.8
ubuntu
2 месяца назад

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

CVSS3: 7.8
redhat
2 месяца назад

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

CVSS3: 7.8
nvd
2 месяца назад

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

CVSS3: 7.8
msrc
около 1 месяца назад

Root escape via symlink plus trailing slash in os

CVSS3: 7.8
debian
2 месяца назад

On Unix systems, opening a file in an os.Root improperly follows symli ...

EPSS

Процентиль: 14%
0.00232
Низкий

7.8 High

CVSS3

Дефекты

CWE-61