890
VMScore

CVE-2021-38197

Published: 08/08/2021 Updated: 16/08/2021
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

go-unarr project go-unarr 0.1.1