Vulnerabilities

3 records

Sort

TI-2020-06189 CVE-2020-7669 · GHSA-75qf-wgfj-v652

Arbitrary File Write via Archive Extraction (Zip Slip)

LOW 36

This affects all versions of package github.com/u-root/u-root/pkg/tarutil.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0183 Published 2020-09-01 Fixed in 0.9.0 CWE-22

TI-2020-06186 CVE-2020-7666 · GHSA-mq35-x99r-54fc

LOW 36

This affects all versions of package github.com/u-root/u-root/pkg/cpio.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01527 Published 2020-09-01 No fix listed CWE-22

TI-2020-06185 CVE-2020-7665 · GHSA-58pf-pcwv-qg85

LOW 36

This affects all versions of package github.com/u-root/u-root/pkg/uzip.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01826 Published 2020-09-01 Fixed in 0.9.0 CWE-22