critical9.8
CVE-2021-31272
SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution …
Impact
SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution or privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Serenityos | Serenityos | before 3844e8569689dd476064a0759d704bc64fb3ca2c |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/SerenityOS/serenity/issues/3991
- https://github.com/SerenityOS/serenity/issues/3992
- https://github.com/SerenityOS/serenity/pull/5713
- https://github.com/SerenityOS/serenity/pull/5713/commits/3844e8569689dd476064a0759d704bc64fb3ca2c
- https://github.com/SerenityOS/serenity/issues/3991
- https://github.com/SerenityOS/serenity/issues/3992
- https://github.com/SerenityOS/serenity/pull/5713
- https://github.com/SerenityOS/serenity/pull/5713/commits/3844e8569689dd476064a0759d704bc64fb3ca2c