data/reports: add alias for GO-2020-0025.yaml
Aliases: CVE-2018-25046, GHSA-32qh-8vg6-9g43
Updates golang/vulndb#25
Fixes golang/vulndb#1229
Change-Id: I847fbb3e664617b1f4a91cd9493ada34ef88cf78
Reviewed-on: https://go-review.googlesource.com/c/vulndb/+/461439
Reviewed-by: Damien Neil <dneil@google.com>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Tatiana Bradley <tatiana@golang.org>
Run-TryBot: Tatiana Bradley <tatiana@golang.org>
diff --git a/data/osv/GO-2020-0025.json b/data/osv/GO-2020-0025.json
index fe22cda..c05bfe0 100644
--- a/data/osv/GO-2020-0025.json
+++ b/data/osv/GO-2020-0025.json
@@ -3,7 +3,8 @@
"published": "2021-04-14T20:04:52Z",
"modified": "0001-01-01T00:00:00Z",
"aliases": [
- "CVE-2018-25046"
+ "CVE-2018-25046",
+ "GHSA-32qh-8vg6-9g43"
],
"details": "Due to improper path santization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.",
"affected": [
diff --git a/data/reports/GO-2020-0025.yaml b/data/reports/GO-2020-0025.yaml
index 7e85cc1..55a9f26 100644
--- a/data/reports/GO-2020-0025.yaml
+++ b/data/reports/GO-2020-0025.yaml
@@ -20,6 +20,8 @@
paths can cause files to be written (or overwritten) outside of the
target directory.
published: 2021-04-14T20:04:52Z
+ghsas:
+ - GHSA-32qh-8vg6-9g43
references:
- fix: https://github.com/cloudfoundry/archiver/commit/09b5706aa9367972c09144a450bb4523049ee840
- web: https://snyk.io/research/zip-slip-vulnerability
