Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:18696
HistoryMay 15, 2019 - 12:52 a.m.

Arbitrary File Write

2019-05-1500:52:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

47.7%

github.com/mholt/archiver is vulnerable to arbitrary file write attacks. The vulnerability exists as the library does not properly sanitize the destination filepath when extracting archived files, allowing a malicious user to extract files to an arbitrary filepath and overwrite files.

0.001 Low

EPSS

Percentile

47.7%