CVE-2023-7216

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker to trick a user into opening a specially crafted archive. During the extraction process, the archiver could follow symlinks outside of the intended directory, which allows files to be written in arbitrary directories through symlinks.

• CWE-59
• CWE-22
• CWE-59

• https://access.redhat.com/security/cve/CVE-2023-7216Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2249901Exploit, Issue Tracking, Third Party Advisory
• https://access.redhat.com/security/cve/CVE-2023-7216Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2249901Exploit, Issue Tracking, Third Party Advisory

Published

Feb 5, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-7210A vulnerability was found in OneNav up to 0.9.33. It has bee…9.8
• CVE-2023-7211A vulnerability was found in Uniway Router 2.0. It has been …8.1
• CVE-2023-7212A vulnerability classified as critical has been found in DeD…9.8
• CVE-2023-7213A vulnerability classified as critical was found in Totolink…8.8
• CVE-2023-7214A vulnerability, which was classified as critical, has been …8.8
• CVE-2023-7215A vulnerability, which was classified as problematic, has be…6.1
• CVE-2023-7218A vulnerability, which was classified as critical, was found…7.2
• CVE-2023-7219A vulnerability has been found in Totolink N350RT 9.3.5u.613…9.8
• CVE-2023-7220A vulnerability was found in Totolink NR1800X 9.1.0u.6279_B2…9.8
• CVE-2023-7221A vulnerability was found in Totolink T6 4.1.9cu.5241_B20210…9.8
• CVE-2023-7222A vulnerability was found in Totolink X2000R 1.0.0-B20221212…9.8
• CVE-2023-7223A vulnerability classified as problematic has been found in …6.5