DotNetZip 路径遍历漏洞

DotNetZip is a tool by Henrik Feldt, a personal developer. NET library provided for working with ZIP files. A security vulnerability exists in DotNetZip v1.16.0 and earlier versions, which stems from the presence of a directory traversal vulnerability that allows remote attackers to execute...

PT-2018-9625 · Hewlett Packard · Dotnetzip

Name of the Vulnerable Software and Affected Versions: DotNetZip.Semvered versions prior to 1.11.0 Description: The issue allows attackers to perform directory traversal, enabling them to write to arbitrary files. This is achieved by including a ../ dot dot slash in a Zip archive entry, which is...