Directory Traversal Vulnerability in SerenityOS by SerenityOS
CVE-2021-31272

9.8CRITICAL

Key Information:

Vendor

Serenityos

Status
Serenityos
Vendor
CVE Published:
18 June 2021

What is CVE-2021-31272?

A directory traversal vulnerability exists in SerenityOS, specifically in the tar/unzip functionalities. This flaw can potentially allow attackers to manipulate file paths, leading to unauthorized command execution or gaining elevated privileges on the system. The issue has been identified in versions prior to commit 3844e8569689dd476064a0759d704bc64fb3ca2c, emphasizing the need for updates to secure the environment effectively.

References

https://github.com/SerenityOS/serenity/issues/3991
x_refsource_MISC
https://github.com/SerenityOS/serenity/issues/3992
x_refsource_MISC
https://github.com/SerenityOS/serenity/pull/5713/commits/...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.