Lucene search
+L
Bytecode Viewer ProjectBytecode Viewer

1 matches found

CVE
CVE
added 2022/01/12 6:20 p.m.113 views

CVE-2022-21675

BCV (Bytecode Viewer) versions prior to 2.11.0 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip). A crafted archive with directory traversal filenames (e.g., ../../evil.exe) can overwrite files across formats such as zip, jar, tar, war, cpio, apk, rar, 7z, enabling file ove...

9.9CVSS8.2AI score0.02544EPSS
Save