logo

Database

Lack of data validation - Path Traversal In onnx

Description

Directory Traversal in onnx Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory, for example "../../../etc/passwd"

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem
Component
Affected version
Patched versions

Aliases

1. CVE-2022-258822. NVD-2022-258823. OSV-2022-258824. GCVE-2022-25882

References

1. https://github.com/onnx/onnx/issues/39912. https://github.com/onnx/onnx/pull/44003. https://github.com/onnx/onnx/commit/f369b0e859024095d721f1d1612da5a8fa38988d4. https://gist.github.com/jnovikov/02a9aff9bf2188033e77bd91ff0628565. https://github.com/onnx/onnx/blob/96516aecd4c110b0ac57eba08ac236ebf7205728/onnx/checker.cc%23L1296. https://github.com/pypa/advisory-database/tree/main/vulns/onnx/PYSEC-2023-38.yaml

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.