Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via filename headers when constructing the workDirectory path. An attacker can write a .zip archive to an arbitrary filesystem location outside the intended directory by supplying crafted input. Details A Directory...