CVE-2023-0593

Name of the Vulnerable Software and Affected Versions yaffshiv versions up to 0.1

Description A path traversal issue affects the yaffshiv YAFFS filesystem extractor. By crafting a malicious YAFFS file, an attacker could force yaffshiv to write outside of the extraction directory.

Recommendations For versions up to 0.1, consider restricting the use of yaffshiv until a patch is available, or apply configuration changes to limit the extraction directory access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.