An issue was discovered in the mozwire crate through 2020-08-18 for Rust. A ../ directory-traversal situation allows overwriting local files that have .conf at the end of the filename.
References:MDE2OlNlY3VyaXR5QWR2aXNvcnlHSFNBLTR2aHctNHJ3Ny1qZnB2
Path traversal in mozwire
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| cargo:mozwire | < 0.5.0 | 0.5.0 | |
Affected Version RangesAll affected versions0.1.0, 0.2.0, 0.3.0, 0.4.0, 0.4.1 All unaffected versions0.5.0, 0.5.1, 0.5.2, 0.6.0, 0.7.0, 0.8.1 |
|||