CVE-2020-9479 unzip directory traversal
A crafted zip file could allow files to be placed outside the UDF deployment directory in unreleased Apache AsterixDB builds.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2020-9479?
CVE-2020-9479 is a medium-severity path traversal vulnerability in Apache AsterixDB, published on 1 Mar 2021. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
When loading a UDF, a specially crafted zip file could allow files to be placed outside of the UDF deployment directory. This issue affected Apache AsterixDB unreleased builds between commits 580b81aa5e8888b8e1b0620521a1c9680e54df73 and 28c0ee84f1387ab5d0659e9e822f4e3923ddc22d. Note: this CVE may be REJECTed as the issue did not affect any released versions of Apache AsterixDB
Weakness: CWE-22
Which versions are affected by CVE-2020-9479?
It affects 1 product.
Products include Apache Asterixdb.
How do I fix CVE-2020-9479?
No fix has been published for CVE-2020-9479 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2020-9479 being exploited?
There is no known exploitation of CVE-2020-9479 in the wild and no public exploit code.
Sources
Also known as GHSA-j3f6-5wcm-3v96.