GitHub Advisoryadvisory · crates.io

GHSA-4vhw-4rw7-jfpv Path traversal in mozwire

CRITICAL Published 2021-08-25 Modified 2023-02-09 Official page ↗
Aliases
CVE-2020-35883
Ecosystem
crates.io
Packages
mozwire
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Weaknesses
CWE-22
Reviewed
2021-08-19

Affected packages

• crates.io mozwire: < 0.5.0 → fixed in 0.5.0

Description

An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename.

Related

Alias · CVE (1)

  • CVE-2020-35883 An issue was discovered in the mozwire crate through 2020-08-18 for Rust. vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References