Threats tagged 'ghsa-qg5c-wc5w-5wp2'

A relative path traversal vulnerability exists in openEuler iSulad on Linux in the oci_load_process_manifest() function, which fails to sanitize the Config path of manifest.json. This flaw allows a malicious tar package to cause the isulad process, running with root privileges, to read arbitrary files on the host system. The vulnerability affects iSulad versions through 2.1.6 and has a CVSS 3.1 score of 7.4 (high severity).