A vulnerability in Rsync allows files to be overwritten on the client side.
A vulnerability has been identified in rsync, the utility for file synchronization and backup (CVE-2022-29154). It allows an attacker controlling an rsync server to write or overwrite arbitrary files in the target directory on the user's side when accessing it. The attack could potentially also be executed as a result of a man-in-the-middle (MITM) intervention in the transit traffic between the client and the legitimate server. The issue has been addressed in the test release of Rsync 3.2.5pre1. […]
