K64709522: Multiple Zip Slip vulnerabilities

🗓️ 21 Feb 2023 18:46:57Reported by f5Type

f5🔗 my.f5.com👁 85 Views

Multiple Zip Slip vulnerabilities in various libraries including plexus-archiver, zt-zip, zip4j, unzipper npm, adm-zip npm, DotNetZip.Semvered, SharpCompress, mholt/archiver golang package, sharplibzip, QuaZIP

Reporter	Title	Published	Views	Family All 197
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities may affect IBM Robotic Process Automation	4 May 202218:53	–	ibm
Tenable Nessus	Amazon Linux 2 : plexus-archiver (ALAS-2018-1043)	29 Jun 201800:00	–	nessus
Tenable Nessus	CentOS 7 : plexus-archiver (CESA-2018:1836)	15 Jun 201800:00	–	nessus
Tenable Nessus	Debian DLA-1564-1 : mono security update	2 Nov 201800:00	–	nessus
Tenable Nessus	Debian DSA-4227-1 : plexus-archiver - security update	13 Jun 201800:00	–	nessus
Tenable Nessus	Fedora 28 : quazip (2018-0c586e5178)	3 Jan 201900:00	–	nessus
Tenable Nessus	Fedora 27 : plexus-archiver (2018-6c55e1f79c)	15 Jun 201800:00	–	nessus
Tenable Nessus	Fedora 28 : plexus-archiver (2018-7a9a2f6ec0)	3 Jan 201900:00	–	nessus
Tenable Nessus	NewStart CGSL CORE 5.04 / MAIN 5.04 : plexus-archiver Vulnerability (NS-SA-2019-0041)	12 Aug 201900:00	–	nessus

21 Feb 2023 18:46Current

5.9Medium risk

Vulners AI Score5.9

CVSS 25.8

CVSS 36.5

CVSS 3.15.5

EPSS0.17577

SSVC