CVE-2020-7669 — Arbitrary File Write via Archive Extraction (Zip Slip)
This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.
Published: 2020-09-01 · CVSS: 7.5 · CVSS 3.0
This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7