Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:12989
HistoryJan 15, 2019 - 9:24 a.m.

Arbitrary File Write

2019-01-1509:24:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.001 Low

EPSS

Percentile

47.8%

Plexus Archiver Component is vulnerable to zip-slip vulnerability. The vulnerability exists when the attacker inputs a malicious zip archive with filenames including file traversal characters such as dot dot (..), leading to concatenation of file path locating outside of the destination folder.