CVE-2024-12088 — Rsync: --safe-links option bypass leads to path traversal
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another s…
Published: 2025-01-14 · CVSS: 6.5 · CVSS 3.1
A flaw was found in rsync. When using the `--safe-links` option, the rsync client fails to properly verify if a symbolic link destination sent from the server contains another symbolic link within it. This results in a path traversal vulnerability, which may lead to arbitrary file write outside the desired directory.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7