A ..%2F path traversal vulnerability exists in the path handler of awful-salmonella-tar before 0.0.4. Attackers can only list directories (not read files). This occurs because the safe-path? Scheme predicate is not used for directories.
References
| Link | Resource |
|---|---|
| https://github.com/mario-goulart/awful-salmonella-tar/commit/f705c881769b7610745cd4b4d8ae8b41b3f4f845 | Patch Third Party Advisory |
| https://wiki.call-cc.org/eggref/5/awful-salmonella-tar | Product Third Party Advisory |
| https://github.com/mario-goulart/awful-salmonella-tar/commit/f705c881769b7610745cd4b4d8ae8b41b3f4f845 | Patch Third Party Advisory |
| https://wiki.call-cc.org/eggref/5/awful-salmonella-tar | Product Third Party Advisory |
Configurations
History
21 Nov 2024, 06:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/mario-goulart/awful-salmonella-tar/commit/f705c881769b7610745cd4b4d8ae8b41b3f4f845 - Patch, Third Party Advisory | |
| References | () https://wiki.call-cc.org/eggref/5/awful-salmonella-tar - Product, Third Party Advisory |
Information
Published : 2022-02-18 22:15
Updated : 2024-11-21 06:52
NVD link : CVE-2022-25358
Mitre link : CVE-2022-25358
CVE.ORG link : CVE-2022-25358
JSON object : View
Products Affected
awful-salmonella-tar_project
- awful-salmonella-tar
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')