ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-12015

PoC —
CVSS 3.0
7.5 high
EPSS
7%p94
Published
()
Modified
Description

In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite arbitrary files, via an archive file containing a symlink and a regular file with the same name.

Vendors
canonicaldebianperlarchive\applenetapp
Products
ubuntu linux, debian linux, perl, \, mac os x, data ontap edge, oncommand workflow automation, snap creator framework, snapdrive
Weakness
CWE-59
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD CVE.org GitHub PoCs EPSS (7.3%)

In the news

No ingested article mentions this CVE yet.