Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xcgv-8mv7-v8c7

Опубликовано: 08 июл. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.8

Описание

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

EPSS

Процентиль: 14%
0.00232
Низкий

7.8 High

CVSS3

Дефекты

CWE-61

Связанные уязвимости

CVSS3: 7.8
ubuntu
23 дня назад

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

CVSS3: 7.8
redhat
23 дня назад

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

CVSS3: 7.8
nvd
23 дня назад

On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open("symlink/")' will open "symlink" even when "symlink" is a symbolic link pointing outside of the root.

msrc
16 дней назад

Root escape via symlink plus trailing slash in os

CVSS3: 7.8
debian
23 дня назад

On Unix systems, opening a file in an os.Root improperly follows symli ...

EPSS

Процентиль: 14%
0.00232
Низкий

7.8 High

CVSS3

Дефекты

CWE-61