WRITEUP

WRITEUP
Exploit for CVE-2025-59336 - Luanox <0.1.1 - Path Traversal
AI Analysis

This patch addresses a relative path traversal vulnerability in the Luanox Rockspec Verifier by adding input validation for package names. The fix ensures package names only contain alphanumeric characters, underscores, and hyphens, preventing malicious path traversal via malformed package names.

Attack Type
other
Complexity
moderate
Reliability
reliable
MITRE ATT&CK
T1006 - Direct Volume Access
Loading exploit code...
Download ZIP Password: eip
Authors
vhyrro
Vulnerability
CVE-2025-59336
Luanox <0.1.1 - Path Traversal