Skip to content
[CVE-2020-27637] CRAN Version 4.0.2 Advisory
bishopfox.com | vulnerability | CVE-2020-27637 | #supply-chain | #path-traversal | #advisory | #cran | #r-language | #cve-2020-27637
Summary
CRAN 4.0.2 path traversal (CVE-2020-27637): malicious R packages abuse tar.gz headers to write outside install directories — overwriting binaries, adding cronjobs, planting SSH keys; fixed in 4.0.3.
- Published
- Collected