En bref
- CVE-2020-36566 est une vulnérabilité CRITIQUE (CVSS 9.1) touchant github.com/whyrusleeping/tar-utils, tar-utils (tar-utils project).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.1%, plus élevée que 66.2% des vulnérabilités.
- Correctif : mettre à jour vers 0.0.0-20201201191210-20a61371de5b ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| github.com/whyrusleeping/tar-utils Go | < 0.0.0-20201201191210-20a61371de5b
| 0.0.0-20201201191210-20a61371de5b
|
| tar-utils | < 0.0.0-20201201191210-20a61371de5b
| 0.0.0-20201201191210-20a61371de5b
|
Description
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
NVD description
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free