ZeroHour

Vulnerabilities

3 CVEs · NVD, GitHub Advisories, CISA KEV, FIRST EPSS, GitHub PoC repos

CVEVulnerabilityCVSSEPSSFlagsAffectedExposurePublished
CVE-2020-7669
+2 in the same advisory: …7665 …7666
This affects all versions of package github.com/u-root/u-root/pkg/tarutil.

This affects all versions of package github.com/u-root/u-root/pkg/tarutil. It is vulnerable to both leading and non-leading relative path traversal attacks in tar file extraction.

NVD description · AI analysis pending
7.52% PoC
  • u-root u-root