Path traversal in github.com/cloudflare/cfrpki/cmd/octorpki
Impact
In the case that a malicious TAL file is parsed pointing to a repository that provides a malicious ROA file which octorpki downloads, it is possible to bypass the current directory traversal mitigation to allow writing outside of the current directory.
Patches
No patch release has been made
| Software | From | Fixed in |
|---|---|---|
github.com/cloudflare/cfrpki/cmd/octorpki
|
- | 1.4.2.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime