CVE-2024-0406 - CVE House
Back to Database
Status published Medium CVE-2024-0406

Mholt/archiver: path traversal vulnerability

Vulnerability Description

A flaw was discovered in the mholt/archiver package. This flaw allows an attacker to create a specially crafted tar file, which, when unpacked, may allow access to restricted files or directories. This issue can allow the creation or overwriting of files with the user's or application's privileges using the library.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-0406

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • This issue was discovered by Stefan Cornelius (Red Hat).

Affected Vendor

Affected Software

Red Hat OpenShift Container Platform 4.18, Red Hat Advanced Cluster Security 3, Red Hat Advanced Cluster Security 4
Vulnerable Versions:
v3.0.0, v4.0.0, v4.18.0-202503051333.p0.g22b273d.assembly.stream.el9

Timeline

Official Publish: April 6th, 2024
Last Modified: November 20th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:N

Weaknesses (CWE)