pentester.land· Sep 19, 2023· by Tobias Ospelt (@floyd_ch), Martin Schobert🔍 CVE-2023-38346

Wind River VxWorks tarExtract directory traversal vulnerability (CVE-2023-38346)

Target Program: Wind River

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#Path traversal#Security code review#CVE-2023-38346