Lucene search

CVE-2021-23520

🗓️ 31 Jan 2022 11:07:15Reported by snykType

The juce-framework/juce package before 6.1.5 is vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) through the ZipFile::uncompressEntry function

Reporter	Title	Published	Views	Family All 6
Prion	Design/Logic Flaw	31 Jan 202211:15	–	prion
OSV	CVE-2021-23520	31 Jan 202211:15	–	osv
Debian CVE	CVE-2021-23520	31 Jan 202211:15	–	debiancve
Cvelist	CVE-2021-23520 Arbitrary File Write via Archive Extraction (Zip Slip)	31 Jan 202210:56	–	cvelist
NVD	CVE-2021-23520	31 Jan 202211:15	–	nvd
UbuntuCve	CVE-2021-23520	31 Jan 202200:00	–	ubuntucve

Nvd

Node

juce juceRange<6.1.5

Source	Link
snyk	www.snyk.io/vuln/SNYK-UNMANAGED-JUCEFRAMEWORKJUCE-2388607
snyk	www.snyk.io/research/zip-slip-vulnerability
github	www.github.com/juce-framework/JUCE/commit/2e874e80cba0152201aff6a4d0dc407997d10a7f

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

31 Jan 2022 11:15Current

7.3High risk

Vulners AI Score7.3

CVSS27.5

CVSS39.8

EPSS0.012

CWE-22