Kurz gesagt
- CVE-2020-36566 ist eine Schwachstelle (KRITISCH (CVSS 9.1)) in github.com/whyrusleeping/tar-utils, tar-utils (tar-utils project).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.1%, höher als bei 66.2% aller Schwachstellen.
- Abhilfe: auf 0.0.0-20201201191210-20a61371de5b oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| github.com/whyrusleeping/tar-utils Go | < 0.0.0-20201201191210-20a61371de5b
| 0.0.0-20201201191210-20a61371de5b
|
| tar-utils | < 0.0.0-20201201191210-20a61371de5b
| 0.0.0-20201201191210-20a61371de5b
|
Description
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
NVD description
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free