CVE-2023-0592

Path traversal in jefferson

View on CVE.org

Published Jan 31, 2023 CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed

Description

A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.

Affected Products

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions

sviehb

jefferson

unaffected

Version	Status	Constraints
`0`	affected	< 0.4.1

Configuration 1 [-]

cpe:2.3:a:jefferson_project:jefferson:*:*:*:*:*:*:*:*

No data.

No data available yet.

Remediation

Vendor Solution

Upgrade to version 0.4.1

Tracking

Sign in to view the affected projects.

Advisories

Source	ID	Title
EUVD	EUVD-2023-12631	A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploit prediction score: < 1% (0.372% probability within 30 days)

Exploitation poc

Automatable no

Technical Impact partial

References

Link	Providers
https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6
https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/

History

Mar 28, 2025 8:15 AM Scoring metrics updated View changes

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Subscriptions

Jefferson Project Jefferson

Weaknesses

CWE-22

Sources

CVE record Updated: Mar 27, 2025, 2:37 PM

Status: PUBLISHED
Assigner: ONEKEY
Published: Jan 31, 2023, 9:25 AM
Updated: Mar 27, 2025, 2:37 PM
Reserved: Jan 31, 2023, 9:18 AM

View source JSON

Vulnrichment Updated: Aug 2, 2024, 5:17 AM

Updated: Aug 2, 2024, 5:17 AM

NVD Updated: Jun 17, 2026, 5:25 AM

Status: Modified
Published: Jan 31, 2023, 10:15 AM
Modified: Jun 17, 2026, 5:25 AM

View source JSON

Red Hat No data

No data.

OpenCVE enrichment No data

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-0592", "assignerOrgId": "2d533b80-6e4a-4e20-93e2-171235122846", "state": "PUBLISHED", "assignerShortName": "ONEKEY", "dateReserved": "2023-01-31T09:18:23.165Z", "datePublished": "2023-01-31T09:25:10.019Z", "dateUpdated": "2025-03-27T14:37:58.470Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://github.com/sviehb/jefferson", "defaultStatus": "unaffected", "modules": ["jefferson"], "packageName": "jefferson", "product": "jefferson", "repo": "https://github.com/sviehb/jefferson", "vendor": "sviehb", "versions": [{"lessThan": "0.4.1", "status": "affected", "version": "0", "versionType": "0.4.1"}]}], "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Quentin Kaiser from ONEKEY Research Labs"}, {"lang": "en", "type": "remediation verifier", "user": "00000000-0000-4000-9000-000000000000", "value": "Stefan Viehb\u00f6ck"}], "datePublic": "2023-01-31T08:00:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.<p>This issue affects jefferson: before 0.4.1.</p>"}], "value": "A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.\n\n"}], "exploits": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Proof-of-concept."}], "value": "Proof-of-concept."}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "2d533b80-6e4a-4e20-93e2-171235122846", "shortName": "ONEKEY", "dateUpdated": "2023-01-31T09:25:23.588Z"}, "references": [{"url": "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/"}, {"url": "https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Upgrade to version 0.4.1"}], "value": "Upgrade to version 0.4.1"}], "source": {"discovery": "UNKNOWN"}, "title": "Path traversal in jefferson", "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:17:50.162Z"}, "title": "CVE Program Container", "references": [{"url": "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/", "tags": ["x_transferred"]}, {"url": "https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-27T14:37:52.247248Z", "id": "CVE-2023-0592", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T14:37:58.470Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/", "tags": ["x_transferred"]}, {"url": "https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T05:17:50.162Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-0592", "role": "CISA Coordinator", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-27T14:37:52.247248Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-27T14:37:40.014Z"}}], "cna": {"title": "Path traversal in jefferson", "source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "user": "00000000-0000-4000-9000-000000000000", "value": "Quentin Kaiser from ONEKEY Research Labs"}, {"lang": "en", "type": "remediation verifier", "user": "00000000-0000-4000-9000-000000000000", "value": "Stefan Viehb\u00f6ck"}], "impacts": [{"capecId": "CAPEC-126", "descriptions": [{"lang": "en", "value": "CAPEC-126 Path Traversal"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"repo": "https://github.com/sviehb/jefferson", "vendor": "sviehb", "modules": ["jefferson"], "product": "jefferson", "versions": [{"status": "affected", "version": "0", "lessThan": "0.4.1", "versionType": "0.4.1"}], "packageName": "jefferson", "collectionURL": "https://github.com/sviehb/jefferson", "defaultStatus": "unaffected"}], "exploits": [{"lang": "en", "value": "Proof-of-concept.", "supportingMedia": [{"type": "text/html", "value": "Proof-of-concept.", "base64": false}]}], "solutions": [{"lang": "en", "value": "Upgrade to version 0.4.1", "supportingMedia": [{"type": "text/html", "value": "Upgrade to version 0.4.1", "base64": false}]}], "datePublic": "2023-01-31T08:00:00.000Z", "references": [{"url": "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/"}, {"url": "https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.\n\n", "supportingMedia": [{"type": "text/html", "value": "A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.<p>This issue affects jefferson: before 0.4.1.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "2d533b80-6e4a-4e20-93e2-171235122846", "shortName": "ONEKEY", "dateUpdated": "2023-01-31T09:25:23.588Z"}}}, "cveMetadata": {"cveId": "CVE-2023-0592", "state": "PUBLISHED", "dateUpdated": "2025-03-27T14:37:58.470Z", "dateReserved": "2023-01-31T09:18:23.165Z", "assignerOrgId": "2d533b80-6e4a-4e20-93e2-171235122846", "datePublished": "2023-01-31T09:25:10.019Z", "assignerShortName": "ONEKEY"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"collectionURL": "https://github.com/sviehb/jefferson", "defaultStatus": "unaffected", "modules": ["jefferson"], "packageName": "jefferson", "product": "jefferson", "repo": "https://github.com/sviehb/jefferson", "vendor": "sviehb", "versions": [{"lessThan": "0.4.1", "status": "affected", "version": "0", "versionType": "0.4.1"}]}], "source": "research@onekey.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:jefferson_project:jefferson:*:*:*:*:*:*:*:*", "matchCriteriaId": "0F4F244F-8F65-4E92-8C70-21E27FB3D652", "versionEndExcluding": "0.4.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A path traversal vulnerability affects jefferson's JFFS2 filesystem extractor. By crafting malicious JFFS2 files, attackers could force jefferson to write outside of the extraction directory.This issue affects jefferson: before 0.4.1.\n\n"}, {"lang": "es", "value": "Una vulnerabilidad de path traversal afecta al extractor del sistema de archivos JFFS2 de Jefferson. Al crear archivos JFFS2 maliciosos, los atacantes podr\u00edan obligar a Jefferson a escribir fuera del directorio de extracci\u00f3n. Este problema afecta a Jefferson: versiones anteriores a 0.4.1."}], "id": "CVE-2023-0592", "lastModified": "2026-06-17T05:25:53.303", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "research@onekey.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2023-0592", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-03-27T14:37:52.247248Z", "version": "2.0.3"}}]}, "published": "2023-01-31T10:15:10.373", "references": [{"source": "research@onekey.com", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6"}, {"source": "research@onekey.com", "tags": ["Exploit", "Third Party Advisory"], "url": "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/sviehb/jefferson/commit/971aca1a8b3b9f4fcb4674fa9621d3349195cdc6"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://onekey.com/blog/security-advisory-remote-command-execution-in-binwalk/"}], "sourceIdentifier": "research@onekey.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "research@onekey.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}