Lucene search
+L

3 matches found

Cvelist
Cvelist
•added 2023/03/16 4:26 p.m.•42 views

CVE-2023-28105 Go-huge-util vulnerable to path traversal when unzipping files

go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When users use zip.Unzip to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. The issue has been fixed in version...

8.8CVSS8.9AI score0.00614EPSS
SaveExploits0References2
Rows per page
Query Builder