Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2018/10/16 5:16 p.m.53 views

DotNetZip Zip-Slip Vulnerability

DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

5.5CVSS5.6AI score0.10395EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder