Lucene search
Veracode Vulnerability DatabaseVERACODE:22595HistoryFeb 28, 2020 - 5:20 a.m.
Arbitrary File Write
2020-02-2805:20:07
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.006 Low
EPSS
Percentile
79.0%
decompress is vulnerable to path traversal. The vulnerability exists due to a zip slip vulnerability. Improper handling of archives containing files that has ../ in its names allows the files to be written out of the intended path.
| CPE | Name | Operator | Version |
|---|---|---|---|
| decompress | le | 4.2.0 | |
| decompress | eq | 2.1.1 | |
| decompress | le | 0.2.4-1 |
Related
cve
cve
CVE-2020-12265
2020-04-26 17:15:11
cvelist
cvelist
CVE-2020-12265
2020-04-26 16:46:21
githubexploit
githubexploit
Exploit for Path Traversal in Decompress Project Decompress
2020-12-01 09:45:48
osv
osv
Path Traversal in decompress
2020-09-03 21:16:27
CVE-2020-12265
2020-04-26 17:15:11
github
github
Path Traversal in decompress
2020-09-03 21:16:27
prion
prion
Directory traversal
2020-04-26 17:15:00
nvd
nvd
CVE-2020-12265
2020-04-26 17:15:11
