blob: 0c253370da79dec2e576e82965b39ffd8a81d593 [file] [log] [blame]
{
"dataType": "CVE_RECORD",
"dataVersion": "5.0",
"cveMetadata": {
"cveId": "CVE-2018-25046"
},
"containers": {
"cna": {
"providerMetadata": {
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc"
},
"title": "Path traversal in code.cloudfoundry.org/archiver",
"descriptions": [
{
"lang": "en",
"value": "Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory."
}
],
"affected": [
{
"vendor": "code.cloudfoundry.org/archiver",
"product": "code.cloudfoundry.org/archiver/extractor",
"collectionURL": "https://pkg.go.dev",
"packageName": "code.cloudfoundry.org/archiver/extractor",
"versions": [
{
"version": "0",
"lessThan": "0.0.0-20180523222229-09b5706aa936",
"status": "affected",
"versionType": "semver"
}
],
"programRoutines": [
{
"name": "extractTarArchiveFile"
},
{
"name": "extractZipArchiveFile"
},
{
"name": "detectableExtractor.Extract"
},
{
"name": "tarExtractor.Extract"
},
{
"name": "tgzExtractor.Extract"
},
{
"name": "zipExtractor.Extract"
}
],
"defaultStatus": "unaffected"
}
],
"problemTypes": [
{
"descriptions": [
{
"lang": "en",
"description": "CWE 29: Path Traversal: \"\\..\\filename\""
}
]
}
],
"references": [
{
"url": "https://github.com/cloudfoundry/archiver/commit/09b5706aa9367972c09144a450bb4523049ee840"
},
{
"url": "https://snyk.io/research/zip-slip-vulnerability"
},
{
"url": "https://pkg.go.dev/vuln/GO-2020-0025"
}
]
}
}
}