Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-41983

[SNYK] Unsanitized input from a CLI argument flows into os.WriteFile

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Normal Normal
    • None
    • 4.14.z, 4.15.z, 4.17.z, 4.16.z, 4.18.0
    • HyperShift
    • None
    • False
    • Hide

      None

      Show
      None

      Error from snyk code test command:

       ✗ [Medium] Path Traversal
   Path: hack/tools/deployment/deployment-update.go, line 137
   Info: Unsanitized input from a CLI argument flows into os.WriteFile, where it is used as a path. This may result in a Path Traversal vulnerability and allow an attacker to write arbitrary files.

              agarcial@redhat.com Alberto Garcia Lamela
              jparrill@redhat.com Juan Manuel Parrilla Madrid
              Jie Zhao Jie Zhao
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: