Lucene search
GoogleOSV:GHSA-88JF-7RCH-32QCHistoryMay 18, 2021 - 8:31 p.m.
github.com/unknwon/cae Path Traversal vulnerability
2021-05-1820:31:18
Google
osv.dev
7
0.001 Low
EPSS
Percentile
43.7%
The ExtractTo function doesn’t securely escape file paths in zip archives which include leading or non-leading “…”. This allows an attacker to add or replace files system-wide.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/unknwon/cae | lt | 1.0.1 |
Related
cve
cve
CVE-2020-7668
2020-06-23 19:38:14
github
github
github.com/unknwon/cae Path Traversal vulnerability
2021-05-18 20:31:18
ubuntucve
ubuntucve
CVE-2020-7668
2020-06-23 00:00:00
nvd
nvd
CVE-2020-7668
2020-06-23 19:38:14
veracode
veracode
Directory Traversal
2020-06-24 03:53:25
osv
osv
Path Traversal in github.com/unknwon/cae
2021-04-14 20:04:52
prion
prion
Code injection
2020-06-23 19:38:00
cvelist
cvelist
CVE-2020-7668 Arbitrary File Write via Archive Extraction (Zip Slip)
2020-06-17 00:00:00