Directory traversal

2019-09-1916:15:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.0%

JSON

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file (even with a …/ sequence) is concatenated with the destination path.

CPENameOperatorVersion
wix_toolsetlt3.11.2

CPE	Name	Operator	Version
	wix_toolset	lt	3.11.2

References

github.com/GitHubAssessments/CVE_Assessments_09_2019

github.com/wixtoolset/issues/issues/6075

wixtoolset.org/development/wips/6075-dtf-zip-slip/

www.firegiant.com/blog/2019/9/18/wix-v3.11.2-released/