CVE-2021-39208

SharpCompress is a fully managed C library to deal with many compression types and formats. Versions prior to 0.29.0 are vulnerable to partial path traversal. SharpCompress recreates a hierarchy of directories under destinationDirectory if ExtractFullPath is set to true in options. In order to...

CVE-2021-39208: Improper Limitation of a Pathname to a Restricted Directory

SharpCompress is a fully managed C library to deal with many compression types and formats. Versions prior to 0.29.0 are vulnerable to partial path traversal. SharpCompress recreates a hierarchy of directories under destinationDirectory if ExtractFullPath is set to true in options. In order to...

PT-2021-22460

Name of the Vulnerable Software and Affected Versions SharpCompress versions prior to 0.29.0 Description The issue concerns a partial path traversal vulnerability in SharpCompress, a fully managed C library for handling various compression types and formats. When ExtractFullPath is set to true in...

SharpCompress 路径遍历漏洞

SharpCompress is a pure C compression library. NET Standard 2.0, 2.1, .NET Core 3.1 and .NET 5.0. SharpCompress suffers from a path traversal vulnerability that stems from ExtractFullPath being set to true and SharpCompress recreating the directory hierarchy under destinationDirectory. An attacke...