Raw Material Software Juce 路径遍历漏洞

Raw Material Software Juce is an open source cross-platform C++ application framework from Raw Material Software, UK. Used to create high quality desktop and mobile applications including Vst, Vst3, Au, Auv3, Rtas and Aax audio plugins. A path traversal vulnerability exists in Raw Material Softwa...

PT-2022-9407

Name of the Vulnerable Software and Affected Versions juce-framework/juce versions prior to 6.1.5 Description The issue allows for Arbitrary File Write via Archive Extraction Zip Slip through the ZipFile::uncompressEntry function in juce ZipFile.cpp. This is triggered when an archive is extracted...

CVE-2021-23521: Improper Link Resolution Before File Access

This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing arbitrary files on the target host. In...

CVE-2021-23520: Improper Limitation of a Pathname to a Restricted Directory

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip via the ZipFile::uncompressEntry function in juceZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo on a ZipFile object...

Raw Material Software Juce 后置链接漏洞

Raw Material Software Juce is an open source cross-platform C++ application framework from Raw Material Software, UK. Used to create high quality desktop and mobile applications including Vst, Vst3, Au, Auv3, Rtas and Aax audio plugins. A backlink vulnerability exists in Raw Material Software Juc...