Description (CNA)
rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module root by exploiting symlinks within the module file tree when using --partial-dir or --backup-dir options. Attackers with write access to place a symlink under the module root, or who can exploit a pre-existing trusted symlink, can direct file writes to locations outside the intended module root, achieving arbitrary file write relative to the module root parent.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| RsyncProject / rsync | affected 2.3.3 through 3.4.4; unaffected 3.5.0 |
CWE
CWE-22, CWE-59
References
- https://github.com/RsyncProject/rsync/security/advisories/GHSA-w3xf-j2r2-gv4x
- https://github.com/RsyncProject/rsync/releases/tag/v3.5.0
- https://www.vulncheck.com/advisories/rsync-path-traversal-via-partial-dir-backup-dir-symlink
ADP enrichment
No English description supplied.
No references supplied.