Lucene search
GoogleOSV:GO-2020-0042HistoryApr 14, 2021 - 8:04 p.m.
Arbitrary File Write via Archive Extraction (Zip Slip) in github.com/sassoftware/go-rpmutils
2021-04-1420:04:52
Google
osv.dev
15
file extraction
rpm vulnerability
improper path sanitization
relative file paths
target directory
software
Due to improper path sanitization, RPMs containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
Related
nvd
nvd
CVE-2020-7667
2020-06-24 12:15:12
github
github
cve
cve
CVE-2020-7667
2020-06-24 12:15:12
osv
osv
github.com/sassoftware/go-rpmutils Arbitrary File Write via Archive Extraction (Zip Slip)
2021-06-23 17:13:29
CVE-2020-7667
2020-06-24 12:15:12
cvelist
cvelist
CVE-2020-7667 Arbitrary File Write via Archive Extraction (Zip Slip)
2020-06-24 12:00:15
prion
prion
Design/Logic Flaw
2020-06-24 12:15:00
veracode
veracode
Arbitrary File Write
2020-06-25 03:10:06
ibm
ibm