GitHub Advisoryadvisory · Go

GHSA-28xp-g7f6-7mhf Syncthing vulnerable to symlink traversal and arbitrary file overwrite

HIGH Published 2022-05-14 Modified 2023-10-10 Official page ↗
Aliases
CVE-2017-1000420
Ecosystem
Go
Packages
github.com/syncthing/syncthing
Severity
High
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-59
Reviewed
2023-07-26

Affected packages

• Go github.com/syncthing/syncthing: <= 0.14.33 (no fix yet)

Description

Syncthing version 0.14.33 and older erronously versions symlinks when they are deleted. If a directory is then created with the same name, a file created in that directory, and the file deleted, it is moved into the symlink target. This can lead to symlink traversal resulting in arbitrary file overwrite.

Related

Alias · CVE (1)

  • CVE-2017-1000420 Syncthing version 0.14.33 and older is vulnerable to symlink traversal resulting in arbitrary file overwrite vulnerability

Weakness · CWE (1)

  • CWE-59 Improper Link Resolution Before File Access weakness

References