CVE-2021-3907
—CVSS 3.1
9.8 critical
EPSS
4%p90
Published
()
Modified
Description
OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex. rsync://example.org/repo/../../etc/cron.daily/evil.roa), which would then be written to disk outside the base cache folder. This could allow for remote code execution on the host machine OctoRPKI is running on.
- Vendors
- cloudflaredebian
- Products
- octorpki, debian linux
- Weakness
- CWE-20, CWE-22
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.