EPSS
5.9 Medium
CVSS3
Связанные уязвимости
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem.
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem.
The "go tool pack" subcommand (usually used only by the compiler as an ...
The "go tool pack" subcommand (usually used only by the compiler as an internal tool with known-good inputs) does not sanitize output filenames. Extracting a malicious archive file with the "pack" subcommand can write files to arbitrary locations on the filesystem.
Уязвимость команды go tool pack языка программирования Go, позволяющая нарушителю получить доступ на чтение и запись произвольных файлов
EPSS
5.9 Medium
CVSS3