Advisory #62
TitleS3Scanner path traversal via malicious object
CVE IDCVE-2021-32061
VendorS3Scanner
Affected productS3Scanner
Affected versions<= 2.0.1
Vulnerability typeCWE-22 (Path Traversal)
DescriptionS3Scanner has a vulnerability that allows a malicious bucket to perform the path traversal.
StatusFixed in 2.0.2.
RecommendationUpdate to 2.0.2 or above.