OCaml Opam Directory Traversal Vulnerability in .install Field

A directory traversal vulnerability has been identified in OCaml Opam versions prior to 2.5.1. The issue arises in the .install field when it contains a destination filepath that can be manipulated to reach a parent directory using '../'. This could potentially allow for unauthorized access to files or directories outside the intended scope.

Impact

Exploitation of this vulnerability could lead to unauthorized file access or manipulation by traversing directories outside the intended boundaries.

Remediation

Users can upgrade to OCaml Opam version 2.5.1 or later to address this vulnerability.