Lucene search

K
osvGoogleOSV:CVE-2021-32840
HistoryJan 26, 2022 - 9:15 p.m.

CVE-2021-32840

2022-01-2621:15:13
Google
osv.dev
4

7.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.8%

SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry ../evil.txt may be extracted in the parent directory of destFolder. This leads to arbitrary file write that may lead to code execution. The vulnerability was patched in version 1.3.3.

7.6 High

AI Score

Confidence

High

0.006 Low

EPSS

Percentile

78.8%