Lucene search

K
osvGoogleOSV:GHSA-M22M-H4RF-PWQ3
HistoryFeb 01, 2022 - 4:22 p.m.

Path Traversal in SharpZipLib

2022-02-0116:22:50
Google
osv.dev
17

0.006 Low

EPSS

Percentile

78.8%

SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry ../evil.txt may be extracted in the parent directory of destFolder. This leads to arbitrary file write that may lead to code execution. The vulnerability was patched in version 1.3.3.

0.006 Low

EPSS

Percentile

78.8%