Lucene search
+L

4 matches found

OSV
OSV
added 2021/05/18 8:31 p.m.73 views

GHSA-VPX7-VM66-QX8R Path Traversal in github.com/unknwon/cae/zip

The ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide. Specific Go Packages Affected github.com/unknwon/cae/zip...

7.5CVSS7.4AI score0.01419EPSS
SaveExploits1References5
Rows per page
Query Builder