hyperledger / hyperledger/fabric
Fix(security): Path traversal Bug
Open
- Dominant language
- Go
- Stars
- 16.7k
- Forks
- 9.1k
- Avg merge
- 5h 38m
- Merged PRs (30d)
- 26
Description
#### Description
Unsanitized input from open tar file flows into os.Open, where it is used as a path. This may result in a Path Traversal vulnerability and allow an attacker to open arbitrary files.
## Data flow:
22 steps in 1 file
vendor/github.com/docker/docker/pkg/archive/diff.go
Contributor guide
Assessment
This issue has not been assessed yet.