Beveiligingsadvies

CVE-2020-7666

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-09-01 13:55:17
Laatst bijgewerkt 2024-09-16 20:41:57
Toegewezen door snyk
CVSS-score 7.5
Status PUBLISHED

Beschrijving

This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction.