Lucene search

K
osvGoogleOSV:CVE-2021-23520
HistoryJan 31, 2022 - 11:15 a.m.

CVE-2021-23520

2022-01-3111:15:07
Google
osv.dev
3

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.

Rows per page:
1-10 of 781

7 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

71.9%

Related for OSV:CVE-2021-23520