CVE-2022-25882
26.01.2023, 21:15
Versions of the package onnx before 1.13.0 are vulnerable to Directory Traversal as the external_data field of the tensor proto can have a path to the file which is outside the model current directory or user-provided directory, for example "../../../etc/passwd"
| Vendor | Product | Version |
|---|---|---|
| linuxfoundation | onnx | 𝑥 < 1.13.0 |
𝑥
= Vulnerable software versions
Ubuntu Releases
References