Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Sas Subscribe
Filtered by product Go Rpm Utils
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-7667 1 Sas 1 Go Rpm Utils 2021-12-20 5.0 MEDIUM 7.5 HIGH
In package github.com/sassoftware/go-rpmutils/cpio before version 0.1.0, the CPIO extraction functionality doesn't sanitize the paths of the archived files for leading and non-leading ".." which leads in file extraction outside of the current directory. Note: the fixing commit was applied to all affected versions which were re-released.