Lack of data validation - Path Traversal In github.com/containers/buildah
Description
Path Traversal in Buildah A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTP(s) server and then write files to the user's system anywhere that the user has permissions.
Specific Go Packages Affected
github.com/containers/buildah/imagebuildah
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 go | 1.14.4 | ||
 debian 12 | 1.11.6-2 | ||
debian 11 | 1.11.6-2 | ||
debian 13 | 1.11.6-2 | ||
go | 1.14.4 | ||
debian 14 | 1.11.6-2 |
Aliases
1. 2. 3. 4. 5. 6. 7. 8.
References
1. 2. 3. 4.