GHSA-28xp-g7f6-7mhf
Syncthing vulnerable to symlink traversal and arbitrary file overwrite
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Go | github.com/syncthing/syncthing | <= 0.14.33 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Syncthing version 0.14.33 and older erronously versions symlinks when they are deleted. If a directory is then created with the same name, a file created in that directory, and the file deleted, it is moved into the symlink target. This can lead to symlink traversal resulting in arbitrary file overwrite.
References
External links from the advisory. They lead to third-party sites.