CVE-2021-26629

A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent path by using the path traversal pattern ‘..\’...

CVE-2021-26629

CVE-2021-26629 is a path traversal flaw affecting Tobesoft Xplatform (XPLATFORM) prior to version 9.2.2.280. The issue arises in the runtime archive handling when decompressing ZIP/.xzip archives, allowing an attacker to create arbitrary files in the parent directory via a path traversal sequence...

PT-2022-9778

Name of the Vulnerable Software and Affected Versions XPLATFORM affected versions not specified Description A path traversal issue in the runtime archive function could lead to arbitrary file creation. When a .xzip archive file is decompressed, an arbitrary file can be created in the parent path ...

CVE-2021-26629: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent path by using the path traversal pattern ‘..\’...