CyberRota Analysis
AI-GeneratedVersions 0.4.11 to 0.4.46 of tar-rs are vulnerable due to a symlink escape issue in the Builder::append_dir_all() function, allowing attackers to read files outside the designated source root directory. This vulnerability can lead to unauthorized file disclosure when a privileged process archives an untrusted directory, potentially exposing sensitive information. Organizations using affected versions should prioritize patching to mitigate the risk of data leakage.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::append_dir_all() function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrusted directory, the function follows symlinks without verifying that resolved targets remain within the source root, causing out-of-bounds files to be included in the archive as regular files and disclosed to the attacker.