CVE-2020-36560

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...

CVE-2020-36560

CVE-2020-36560 corresponds to a path traversal vulnerability in the Go library go-unzip (github.com/artdarek/go-unzip). The root cause is improper path handling during archive extraction, enabling archives containing relative file paths to write or overwrite files outside the intended target dire...

CVE-2020-36560 Path traversal in github.com/artdarek/go-unzip

Due to improper path sanitization, archives containing relative file paths can cause files to be written or overwritten outside of the target directory...