Mholt/archiver: path traversal vulnerability
Summary
A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges u...
Affected packages
| Package | Affected → Fixed | |
|---|---|---|
| GitHubarchiver |
≥ v3.0.0 (no fix yet)→ Not listed |
Not listed |
| Red HatRed Hat OpenShift Container Platform 4.18 | — | Not listed |
| Red HatRed Hat Advanced Cluster Security 3 | — | Not listed |
| Red HatRed Hat Advanced Cluster Security 4 | — | Not listed |
This record does not list fixed versions. Check the article or the vendor advisory in the references for whether and where it is fixed.
Original description The description as published by the source.
A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges using the library.
Source: CVE.org (CVE Program・cvelistV5) NVD
References
- advisory RHSA-2025:2449
- issue RHBZ#2257749
- web access.redhat.com