Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
autoar-extractor.c in GNOME gnome-autoar before 0.3.1, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink in certain complex situations. NOTE: this issue exists because of an incomplete fix for CVE-2020-36241.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Gnome gnome-autoar 后置链接漏洞
Vulnerability Description
Gnome gnome-autoar是Gnome社区的一款为GNOME应用程序提供窗口小部件和gschemas功能的组件。 GNOME gnome-autoar before 0.3.1 存在后置链接漏洞，该漏洞允许在提取过程中遍历目录，因为在某些复杂的情况下，它不检查文件的父文件是否是符号链接。
CVSS Information
N/A
Vulnerability Type
N/A