CVE-2018-1002209

CVE-2018-1002209 (Zip-Slip) affects QuaZIP before 0.7.6, where directory traversal can occur during extraction due to mishandling of a Zip entry. An attacker could write to arbitrary files outside the target directory. The issue is rooted in the archive extraction implementation in QuaZIP (Qt wra...

CVE-2018-1002209

QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

PT-2018-1388 · Quazip +1 · Quazip +1

Name of the Vulnerable Software and Affected Versions: QuaZIP versions prior to 0.7.6 Description: The issue allows attackers to perform directory traversal, enabling them to write to arbitrary files by including a ../ dot dot slash in a Zip archive entry. This is also known as 'Zip-Slip'. The...