Lucene search
PRIOn knowledge basePRION:CVE-2020-7668HistoryJun 23, 2020 - 7:38 p.m.
Code injection
2020-06-2319:38:00
PRIOn knowledge base
www.prio-n.com
3
0.001 Low
EPSS
Percentile
43.7%
In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn’t securely escape file paths in zip archives which include leading or non-leading “…”. This allows an attacker to add or replace files system-wide.
Related
cve
cve
CVE-2020-7668
2020-06-23 19:38:14
github
github
github.com/unknwon/cae Path Traversal vulnerability
2021-05-18 20:31:18
ubuntucve
ubuntucve
CVE-2020-7668
2020-06-23 00:00:00
nvd
nvd
CVE-2020-7668
2020-06-23 19:38:14
veracode
veracode
Directory Traversal
2020-06-24 03:53:25
osv
osv
Path Traversal in github.com/unknwon/cae
2021-04-14 20:04:52
github.com/unknwon/cae Path Traversal vulnerability
2021-05-18 20:31:18
cvelist
cvelist
CVE-2020-7668 Arbitrary File Write via Archive Extraction (Zip Slip)
2020-06-17 00:00:00