Lucene search
Veracode Vulnerability DatabaseVERACODE:25753HistoryJun 24, 2020 - 3:53 a.m.
Directory Traversal
2020-06-2403:53:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.001 Low
EPSS
Percentile
43.7%
github.com/unknwon/cae is vulnerable to directory traversal. The vulnerability exists as the ExtractTo function does not sanitize file paths in zip archives, allowing ../ in file path to be resolved outside the intended extraction folder and potentially allowing arbitrary file write.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/unknwon/cae | le | v1.0.1 | |
| github.com/unknwon/cae | le | v1.0.1 |
Related
cve
cve
CVE-2020-7668
2020-06-23 19:38:14
github
github
github.com/unknwon/cae Path Traversal vulnerability
2021-05-18 20:31:18
ubuntucve
ubuntucve
CVE-2020-7668
2020-06-23 00:00:00
nvd
nvd
CVE-2020-7668
2020-06-23 19:38:14
osv
osv
Path Traversal in github.com/unknwon/cae
2021-04-14 20:04:52
github.com/unknwon/cae Path Traversal vulnerability
2021-05-18 20:31:18
prion
prion
Code injection
2020-06-23 19:38:00
cvelist
cvelist
CVE-2020-7668 Arbitrary File Write via Archive Extraction (Zip Slip)
2020-06-17 00:00:00