sviehb/jefferson vulnerable to path traversal
A vulnerability has been found in the sviehb/jefferson JFFS2 filesystem extraction tool. This vulnerability affects unknown code of the file `src/scripts/jefferson`. The manipulation leads to path traversal. The attack can be initiated remotely. Upgrading to version 0.4 is able to address this issue as it includes https://github.com/sviehb/jefferson/commit/53b3f2fc34af0bb32afbcee29d18213e61471d87.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2022-4885US | medium5.9 | — | ||
A vulnerability has been found in sviehb jefferson up to 0.3 and classified as critical. This vulnerability affects unknown code of the file src/scripts/jefferson. The manipulation… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/sviehb/jeffersonPACKAGE
- https://github.com/sviehb/jefferson/commit/53b3f2fc34af0bb32afbcee29d18213e61471d87WEB
- https://github.com/sviehb/jefferson/pull/36WEB
- https://github.com/sviehb/jefferson/releases/tag/v0.4WEB
- https://nvd.nist.gov/vuln/detail/CVE-2022-4885ADVISORY
- https://vuldb.com/?ctiid.218020WEB
- https://vuldb.com/?id.218020WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan