CVE-2023-39138

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...

CVE-2023-39138

creationtimestamp| type| source ---|---|--- 2023-08-31 02:26:00+00:00| seen| https://t.me/cibsecurity/69493...

CVE-2023-39138

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...

CVE-2023-39138

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...

CVE-2023-39138

An issue in ZIPFoundation v0.9.16 allows attackers to execute a path traversal via extracting a crafted zip file...

CVE-2023-39138

ZIPFoundation v0.9.16 is vulnerable to a path traversal when extracting crafted ZIP archives, enabling writing outside the target directory. The issue is documented across multiple sources (GitHub GHSA- and OSV entries and CVE-2023-39138) and is triggered during extraction of crafted files, with ...