BSCW groupware system 3.3 through 4.0.2 beta allows... · CVE-2001-0973 · GitHub Advisory Database · GitHub

BSCW groupware system 3.3 through 4.0.2 beta allows...

Moderate severity Unreviewed Published Apr 30, 2022 to the GitHub Advisory Database • Updated Jan 30, 2023

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

BSCW groupware system 3.3 through 4.0.2 beta allows remote attackers to read or modify arbitrary files by uploading and extracting a tar file with a symlink into the data-bag space.

References

Published by the National Vulnerability Database

Aug 31, 2001

Published to the GitHub Advisory Database Apr 30, 2022

Last updated Jan 30, 2023