CVE-2023-31483

7.5 highEPSS 1.0%

High (7.5) in cauldrondevelopment cbang. EPSS 1.0% chance of exploitation in the next 30 days.

tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows the attacker to create or write to files outside the current directory via a crafted tar archive.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2023-04-28
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

cauldrondevelopment:cbang

References

https://github.com/CauldronDevelopmentLLC/cbang/compare/bastet-v8.1.16...bastet-v8.1.17
https://github.com/CauldronDevelopmentLLC/cbang/issues/115
https://github.com/CauldronDevelopmentLLC/cbang/compare/bastet-v8.1.16...bastet-v8.1.17
https://github.com/CauldronDevelopmentLLC/cbang/issues/115

Check your stack JSON