GHSA-qppg-v75c-r5ff
S3Scanner allows Directory Traversal
Packages
Details
As written in the advisory (Markdown source, shown as plain text).
S3Scanner before 2.0.2 allows Directory Traversal via a crafted bucket, as demonstrated by a `<Key>../` substring in a `ListBucketResult` element.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2021-32061
- https://github.com/sa7mon/S3Scanner/issues/122
- https://github.com/sa7mon/S3Scanner/commit/fafa30a3bd35b496b3f7db9bfc35b75a8a06bcd1
- https://github.com/advisories/GHSA-qppg-v75c-r5ff
- https://github.com/pypa/advisory-database/tree/main/vulns/s3scanner/PYSEC-2021-433.yaml
- https://github.com/sa7mon/S3Scanner
- https://github.com/sa7mon/S3Scanner/releases/tag/2.0.2
- https://vuln.ryotak.me/advisories/62