CVE-2020-10696

PoC ×2—

CVSS 3.1

8.8 high

EPSS

3%p85

Published

Mar 31, 2020 (Mar 31, 2020)

Modified

Jun 17, 2026

Description

A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.

Vendors: buildah project redhat
Products: buildah, openshift container platform, enterprise linux
Weakness: CWE-22
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.7%)

In the news0 stories

No ingested article mentions this CVE yet.