Arbitrary File Write via Archive Extraction (Zip Slip) in go-rpmutils
ID: 1dc52a7a-6657-55a9-ba5d-6834557e0ada
STIX ID: report--1dc52a7a-6657-55a9-ba5d-6834557e0ada
Feed Name: Snyk Blog
Threat Score
Snyk's Security Research Team discovered a Zip Slip Arbitrary File Write vulnerability (CVE-2020-7667) in the Golang package go-rpmutils; researcher George Gkitsas reported it to the package maintainer (SAS Software), a fix was produced rapidly, and the issue was published and added to the Snyk Vulnerability Database after validation.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.