Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-xm63-5pjx-vrhp

Опубликовано: 11 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7

Описание

A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentially enabling code execution through the modification of sensitive system files.

A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentially enabling code execution through the modification of sensitive system files.

EPSS

Процентиль: 0%
0.00006
Низкий

7 High

CVSS3

Дефекты

CWE-73

Связанные уязвимости

CVSS3: 7
ubuntu
около 1 месяца назад

A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentially enabling code execution through the modification of sensitive system files.

CVSS3: 7
redhat
около 2 месяцев назад

A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentially enabling code execution through the modification of sensitive system files.

CVSS3: 7
nvd
около 1 месяца назад

A flaw was found in BusyBox. Incomplete path sanitization in its archive extraction utilities allows an attacker to craft malicious archives that when extracted, and under specific conditions, may write to files outside the intended directory. This can lead to arbitrary file overwrite, potentially enabling code execution through the modification of sensitive system files.

CVSS3: 7
debian
около 1 месяца назад

A flaw was found in BusyBox. Incomplete path sanitization in its archi ...

suse-cvrf
25 дней назад

Security update for busybox

EPSS

Процентиль: 0%
0.00006
Низкий

7 High

CVSS3

Дефекты

CWE-73