File tree Expand file tree Collapse file tree
python/ql/src/experimental/Security/CWE-022bis Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -17,9 +17,9 @@ the file may be written to an unexpected location. This can result in sensitive
1717revealed or deleted, or an attacker being able to influence behavior by modifying unexpected
1818files.</p >
1919
20- <p >For example, if a tarball contains a file entry <code >../sim4n6 .txt</code >, and the tarball
20+ <p >For example, if a tarball contains a file entry <code >../sneaky-file .txt</code >, and the tarball
2121is extracted to the directory <code >/tmp/tmp123</code >, then naively combining the paths would result
22- in an output file path of <code >/tmp/tmp123/../sim4n6 .txt</code >, which would cause the file to be
22+ in an output file path of <code >/tmp/tmp123/../sneaky-file .txt</code >, which would cause the file to be
2323written to <code >/tmp/</code >.</p >
2424
2525</overview >
You can’t perform that action at this time.
0 commit comments