Description
An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| crates.io | mozwire | < 0.5.0 | 0.5.0 | GHSA-4vhw-4rw7-jfpv |
| crates.io | mozwire | >= 0.0.0-0, < 0.4.2-0 | 0.4.2-0 | RUSTSEC-2020-0030 |