CVE-2024-24579

CVE-2024-24579 is a critical path traversal vulnerability affecting anchore stereoscope versions prior to 0.0.1. It allows an attacker to craft a malicious OCI tar archive that, when processed by stereoscope, can write files outside of the intended temporary directory. With a CVSS score of 9.8 (CRITICAL), this vulnerability has a network attack vector, low attack complexity, and can lead to complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.