DotNetZip Zip-Slip Vulnerability

DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

DotNetZip.Semvered Directory Traversal Vulnerability

DotNetZip.Semvered is a library for working with zip files, which is used to create, extract or update zip files. A directory traversal vulnerability exists in DotNetZip.Semvered versions prior to 1.11.0. An attacker can exploit this vulnerability to write arbitrary files with a specially crafted...

CVE-2018-1002205

CVE-2018-1002205 affects DotNetZip.Semvered before 1.11.0. It is a Zip-Slip directory traversal vulnerability where a crafted archive entry containing ../ can be mishandled during extraction, enabling writing to arbitrary files on the target system. Root cause is improper handling of pathnames du...