GHSA-rprg-4v7q-87v7LowCVSS 3.3

Buildah (as part of Podman) vulnerable to Path Traversal

Published
December 8, 2022
Last Modified
May 20, 2024

🔗 CVE IDs covered (1)

CVE-2022-4123 →

📋 Description

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.

🎯 Affected products1

  • go/github.com/containers/podman/v4:>= 4.1.0-rc1, <= 4.4.1

🔗 References (7)