Lucene search
+L

1 matches found

OSV
OSV
added 2025/03/16 12:00 p.m.5 views

RUSTSEC-2025-0168 Incorrect path canonicalization during Archive Extraction Leading to Arbitrary File Write

In the archive extraction routine of affected versions of the zip crate, symbolic links earlier in the archive are allowed to be used for later files in the archive without validation of the final canonicalized path, allowing maliciously crafted archives to overwrite arbitrary files in the file...

7.3CVSS5.5AI score0.0055EPSS
SaveExploits0References3
Rows per page
Query Builder