CVE-2022-4123
ADVISORY - githubSummary
A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.
EPSS Score: 0.00048 (0.146)
Common Weakness Enumeration (CWE)
ADVISORY - nist
ADVISORY - github
Relative Path Traversal
ADVISORY - gitlab
OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Relative Path Traversal
Cross-Site Request Forgery (CSRF)
OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
ADVISORY - redhat
Relative Path Traversal
Sign in to Docker Scout
See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.
Sign in