Threats tagged 'ghsa-r9xr-74x4-3xrg'

A path traversal vulnerability exists in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux. This flaw could allow an attacker to write arbitrary files with the privileges of the OneCLI process if a user processes a specially crafted ZIP-based update package. The vulnerability has a CVSS score of 5.8, indicating a medium severity level. No affected versions or patch information are explicitly provided.