CVE-2018-1002204

CVE-2018-1002204 affects the adm-zip npm library prior to version 0.4.9. The vulnerability allows directory traversal during ZIP extraction via ../ path segments, enabling an attacker to write arbitrary files on the target system (Zip-Slip). Public references note the remediation: upgrade to 0.4....

CVE-2018-1002206

SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002204

adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002201

CVE-2018-1002201 affects the zt-zip library prior to 1.13. The flaw is a directory traversal in a Zip archive entry that, when mishandled during extraction, allows writing to arbitrary files. This is the classic Zip-Slip issue. Public sources in the connected documents confirm the affected compon...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002202

zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002202

zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002202

CVE-2018-1002202 concerns the zip4j Java library prior to 1.3.3, vulnerable to a directory traversal (Zip-Slip) when extracting a crafted Zip entry containing "..". This can allow writing to arbitrary files on the target system. Reported impact per sources indicates potential integrity impact (hi...

PT-2018-9627 · Mholt · Archiver

Name of the Vulnerable Software and Affected Versions: mholt/archiver versions before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 Description: The issue allows attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction, also known as...

CVE-2018-1002200: Improper Limitation of a Pathname to a Restricted Directory

plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002207: Improper Limitation of a Pathname to a Restricted Directory

mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002204: Improper Limitation of a Pathname to a Restricted Directory

adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

PT-2018-1391

Name of the Vulnerable Software and Affected Versions adm-zip versions prior to 0.4.9 Description The issue is related to a directory traversal vulnerability, also known as 'Zip-Slip', which allows attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is...

CVE-2018-1002209: Improper Limitation of a Pathname to a Restricted Directory

QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

PT-2018-9624

Name of the Vulnerable Software and Affected Versions: unzipper versions prior to 0.8.13 Description: The issue allows attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction, also known as 'Zip-Slip'. This can occur when a...

CVE-2018-1002203: Improper Limitation of a Pathname to a Restricted Directory

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

PT-2018-9625 · Hewlett Packard · Dotnetzip

Name of the Vulnerable Software and Affected Versions: DotNetZip.Semvered versions prior to 1.11.0 Description: The issue allows attackers to perform directory traversal, enabling them to write to arbitrary files. This is achieved by including a ../ dot dot slash in a Zip archive entry, which is...

CVE-2018-1002205: Improper Limitation of a Pathname to a Restricted Directory

DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

PT-2018-9626

Name of the Vulnerable Software and Affected Versions: SharpCompress versions prior to 0.21.0 Description: The issue allows attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This is also known as 'Zip-Slip'. The vulnerabilit...