ZeroHour

CVE-2023-7216

PoC
CVSS 3.1
5.3 medium
EPSS
<1%p58
Published
()
Modified
Description

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files to be written in arbitrary directories through symlinks.

Vendors
gnuredhat
Products
cpio, enterprise linux
Weakness
CWE-59, CWE-22
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

In the news

No ingested article mentions this CVE yet.