A ..%2F path traversal vulnerability exists in the path... · CVE-2022-25358 · GitHub Advisory Database · GitHub

A ..%2F path traversal vulnerability exists in the path...

Moderate severity Unreviewed Published Feb 19, 2022 to the GitHub Advisory Database • Updated Feb 3, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

A ..%2F path traversal vulnerability exists in the path handler of awful-salmonella-tar before 0.0.4. Attackers can only list directories (not read files). This occurs because the safe-path? Scheme predicate is not used for directories.

References

Published by the National Vulnerability Database

Feb 18, 2022

Published to the GitHub Advisory Database Feb 19, 2022

Last updated Feb 3, 2023