CVE-2023-30620CWE-22

Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb

High · published April 21, 2023

CVSS v3.1
7.5
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

mindsdb is a Machine Learning platform to help developers build AI solutions. In affected versions an unsafe extraction is being performed using `tarfile.extractall()` from a remotely retrieved tarball. Which may lead to the writing of the extracted files to an unintended location. Sometimes, the vulnerability is called a TarSlip or a ZipSlip variant. An attacker may leverage this vulnerability to overwrite any local file which the server process has access to. There is no risk of file exposure with this vulnerability. This issue has been addressed in release `23.2.1.0 `. Users are advised to upgrade. There are no known workarounds for this vulnerability.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00992 · 62.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-04-21T20:11Z
EPSS history
Timeline
  • 21 APR 20:11Z
    Arbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdb
    cvelistv5