Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2025-46394

In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use of terminal escape sequences.

Published

2025-04-23T16:15:48.713

Last Modified

2025-09-24T14:38:22.127

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 3.2 (LOW)

Weaknesses
  • Type: Secondary
    CWE-451
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application busybox busybox ≤ 1.37.0 Yes
References