Lucene search

K
ubuntucveUbuntu.comUB:CVE-2018-1002200
HistoryJul 25, 2018 - 12:00 a.m.

CVE-2018-1002200

2018-07-2500:00:00
ubuntu.com
ubuntu.com
8

0.001 Low

EPSS

Percentile

47.2%

plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing
attackers to write to arbitrary files via a …/ (dot dot slash) in an
archive entry that is mishandled during extraction. This vulnerability is
also known as ‘Zip-Slip’.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchplexus-archiver< 3.5-2ubuntu0.1~esm1UNKNOWN
ubuntu14.04noarchplexus-archiver< 1.2-1+deb8u1build14.04.1UNKNOWN
ubuntu16.04noarchplexus-archiver< 2.2-1+deb9u1build16.04.1UNKNOWN