GHSA-28xp-g7f6-7mhfHighCVSS 7.5

Syncthing vulnerable to symlink traversal and arbitrary file overwrite

Published
May 14, 2022
Last Modified
October 10, 2023

🔗 CVE IDs covered (1)

CVE-2017-1000420 →

📋 Description

Syncthing version 0.14.33 and older erronously versions symlinks when they are deleted. If a directory is then created with the same name, a file created in that directory, and the file deleted, it is moved into the symlink target. This can lead to symlink traversal resulting in arbitrary file overwrite.

🎯 Affected products1

  • go/github.com/syncthing/syncthing:<= 0.14.33

🔗 References (4)