13 matches found
zt-zip: ZipUtil.unpack can change file permissions of output directory
Summary When using one of the ZipUtil.unpack overloads, the file permissions of the output directory can be changed. For example, when the output directory was only accessible to the 'owner' it could be instead made accessible to every OS user. Details When the name of a ZIP entry resolves to the...
6.9CVSS5.8AI score0.0028EPSS
SaveExploits0References6Affected Software1
20