title: Path traversal in yaffshiv
description: A path traversal vulnerability affects yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outside of the extraction directory.
This issue affects yaffshiv up to version 0.1 included, which is the most recent at time of publication.
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
collectionURL: https://github.com/devttys0/yaffshiv
defaultStatus: unaffected
modules: yaffshiv
packageName: yaffshiv
product: yaffshiv
repo: https://github.com/devttys0/yaffshiv
vendor: devttys0
versions:
lessThanOrEqual: 0.1, status: affected, version: 0, versionType: 0.1
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
exploits: Proof-of-concept.
solutions: Apply the patch available at  https://github.com/devttys0/yaffshiv/pull/3 https://github.com/devttys0/yaffshiv/pull/3