CVE-2022-4123: Relative Path Traversal

December 8, 2022 (updated February 9, 2023)

A flaw was found in Buildah. The local path and the lowest subdirectory may be disclosed due to incorrect absolute path traversal, resulting in an impact to confidentiality.

References

bugzilla.redhat.com/show_bug.cgi?id=2144989
github.com/advisories/GHSA-rprg-4v7q-87v7
github.com/containers/podman/issues/13293
github.com/containers/podman/pull/13531
nvd.nist.gov/vuln/detail/CVE-2022-4123
pkg.go.dev/vuln/GO-2022-1159

Code Behaviors & Features

Detect and mitigate CVE-2022-4123 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →