Description
tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to create or write to files outside the current directory via a crafted tar archive.
High · 7.5
CVE-2023-31483
EUVD-2023-35788GHSA-r4h7-r2h7-fgx9
tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to creat…
Published Apr 28, 2023 · Updated Jan 31, 2025 · Assigned by mitre