Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-29529
HistoryDec 03, 2020 - 8:15 p.m.

Directory traversal

2020-12-0320:15:00
PRIOn knowledge base
www.prio-n.com
4

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.5%

HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific constructions of multiple symlinks. Fixed in 0.5.0.

CPENameOperatorVersion
go-sluglt0.5.0

7.4 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.5%