Lucene search
GoogleOSV:CVE-2020-12265HistoryApr 26, 2020 - 5:15 p.m.
CVE-2020-12265
2020-04-2617:15:11
Google
osv.dev
9
The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via …/ in an archive member, when a symlink is used, because of Directory Traversal.
| CPE | Name | Operator | Version |
|---|---|---|---|
| decompress | eq | 4.0.0 | |
| decompress | eq | 4.2.0 | |
| decompress | eq | 4.1.0 | |
| decompress | eq | 3.0.0 |
Related
cve
cve
CVE-2020-12265
2020-04-26 17:15:11
githubexploit
githubexploit
Exploit for Path Traversal in Decompress Project Decompress
2020-12-01 09:45:48
veracode
veracode
Arbitrary File Write
2020-02-28 05:20:07
osv
osv
Path Traversal in decompress
2020-09-03 21:16:27
github
github
Path Traversal in decompress
2020-09-03 21:16:27
cvelist
cvelist
CVE-2020-12265
2020-04-26 16:46:21
prion
prion
Directory traversal
2020-04-26 17:15:00
nvd
nvd
CVE-2020-12265
2020-04-26 17:15:11
