writeups.xyz / Wind River VxWorks tarExtract directory traversal vulnerability (CVE-2023-38346)

Submitter : c2a

Date: 19 September 2023

Bounty : undisclosed

Vulnerabilities :

• Path Traversal
• Security Code Review

Programs :

• Wind River

Authors :

• Tobias Ospelt (@Floyd_ch)
• Martin Schobert

Link :
https://www.pentagrid.ch/en/blog/wind-river-vxworks-tarextract-directory-traversal-vulnerability/