CVE-2018-10897

CVE-2018-10897 is a directory traversal vulnerability in reposync, a component of yum-utils, affecting versions 1.1.31 and older across various Red Hat and RPM Enterprise Linux products. An attacker controlling a remote repository can exploit this flaw to write files outside the intended destination directory on a targeted system. With a CVSS score of 8.1 (High), this vulnerability allows for remote, unauthenticated attacks with high impact on confidentiality, integrity, and availability, potentially leading to system compromise if reposync runs with elevated privileges. Despite its severity, there is no evidence of active exploitation, public exploit code, or significant community discussion or media coverage.