Tar-utils Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Tar-utils Project records in CISA KEV

No Tar-utils Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tar-utils 1 record MEDIUM

Records

1 record in Tar-utils · all components

TI-2020-18794 CVE-2020-36566 · GHSA-jpf8-h7h7-3ppm

Path traversal in github.com/whyrusleeping/tar-utils

MEDIUM 49

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.01111 Published 2022-12-27 Fixed in 0.0.0-20201201191210-20a61371de5b CWE-22

Open these records in search →

Critical	1
High	0
Medium	0
Low	0
No CVSS	0