Vulnerability · Published Jun 16, 2020 · Assigned by GitHub_M
CVE-2020-4053Path Traversal in Helm Plugin Archive
Low 3.7
In plain English
A low-severity path traversal in Helm from The Helm Project. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.5% (higher than 74% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Official description
In Helm greater than or equal to 3.0.0 and less than 3.2.4, a path traversal attack is possible when installing Helm plugins from a tar archive over HTTP. It is possible for a malicious plugin author to inject a relative path into a plugin archive, and copy a file outside of the intended directory. This has been fixed in 3.2.4.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Go | helm.sh/helm/v3 | 3.2.4 | GHSA-qq3j-xp49-j73f |
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| The Helm Project | Helm | >= 3.0.0, < 3.2.4 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N
References
- https://github.com/helm/helm/security/advisories/GHSA-qq3j-xp49-j73f x_refsource_CONFIRM
- https://github.com/helm/helm/commit/0ad800ef43d3b826f31a5ad8dfbb4fe05d143688 x_refsource_MISC
- https://github.com/helm/helm/releases/tag/v3.2.4 x_refsource_MISC