漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
radare2 < 6.1.4 Project Deletion Path Traversal Directory Deletion
Vulnerability Description
radare2 prior to 6.1.4 contains a path traversal vulnerability in project deletion that allows local attackers to recursively delete arbitrary directories by supplying absolute paths that escape the configured dir.projects root directory. Attackers can craft absolute paths to project marker files outside the project storage boundary to cause recursive deletion of attacker-chosen directories with permissions of the radare2 process, resulting in integrity and availability loss.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Vulnerability Title
Radare2 路径遍历漏洞
Vulnerability Description
Radare2是Radare开源的一个面向 Unix 极客的 Libre 反向框架。 radare2 6.1.4之前版本存在路径遍历漏洞，该漏洞源于项目删除中的路径遍历，允许本地攻击者通过提供转义配置的dir.projects根目录的绝对路径来递归删除任意目录。
CVSS Information
N/A
Vulnerability Type
N/A