high7.5
CVE-2023-31483
tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to create or write to files …
Impact
tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to create or write to files outside the current directory via a crafted tar archive.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cauldrondevelopment | Cbang | before 8.1.17 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/CauldronDevelopmentLLC/cbang/compare/bastet-v8.1.16...bastet-v8.1.17
- https://github.com/CauldronDevelopmentLLC/cbang/issues/115
- https://github.com/CauldronDevelopmentLLC/cbang/compare/bastet-v8.1.16...bastet-v8.1.17
- https://github.com/CauldronDevelopmentLLC/cbang/issues/115