| modules: | |
| - module: github.com/containers/podman/v4 | |
| versions: | |
| - introduced: 4.1.0-rc1 | |
| vulnerable_at: 4.3.1 | |
| packages: | |
| - package: github.com/containers/podman/v4/pkg/bindings/images | |
| symbols: | |
| - Build | |
| - nTar | |
| description: |- | |
| The local path and the lowest subdirectory may be disclosed due to | |
| incorrect absolute path traversal, resulting in an impact to | |
| confidentiality. | |
| cves: | |
| - CVE-2022-4123 | |
| ghsas: | |
| - GHSA-rprg-4v7q-87v7 | |
| credit: Sage McTaggart | |
| references: | |
| - report: https://bugzilla.redhat.com/show_bug.cgi?id=2144989 | |
| - web: https://github.com/containers/podman/pull/13531 |