Threats tagged 'ghsa-php2-xh4g-g5mj'

A path traversal vulnerability in apport before version 2.37.0 allows an attacker who can supply a crafted crash report to cause unintended file creation or overwrite outside the intended extraction directory when processed with apport-unpack. This occurs because base64-encoded keys are not properly validated, enabling arbitrary file writes such as overwriting .bashrc or .profile files, potentially leading to persistence or code execution in the user's context.