What is GHSA-4vhw-4rw7-jfpv?

GHSA-4vhw-4rw7-jfpv is a security advisory published by GitHub Security Advisories with Critical severity. Path traversal in mozwire

Which CVE IDs does GHSA-4vhw-4rw7-jfpv cover?

GHSA-4vhw-4rw7-jfpv covers the following CVE IDs: CVE-2020-35883. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4vhw-4rw7-jfpv?

GHSA-4vhw-4rw7-jfpv has a CVSS v3 base score of 9.1, published by GitHub Security Advisories.

Which products are affected by GHSA-4vhw-4rw7-jfpv?

GHSA-4vhw-4rw7-jfpv affects 1 product, including: rust/mozwire:\u003c 0.5.0.

GHSA-4vhw-4rw7-jfpvCriticalCVSS 9.1

Path traversal in mozwire

Vendor

GitHub Security Advisories

Published

August 25, 2021

Last Modified

February 9, 2023

🔗 CVE IDs covered (1)

CVE-2020-35883 →

📋 Description

An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename.

🎯 Affected products1

rust/mozwire:< 0.5.0

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-35883
https://github.com/NilsIrl/MozWire/issues/14
https://rustsec.org/advisories/RUSTSEC-2020-0030.html
https://github.com/NilsIrl/MozWire/pull/17/commits/dd0639bf2876773b66382f47285f7db701f628d9
https://github.com/advisories/GHSA-4vhw-4rw7-jfpv