Directory Traversal

2021-12-0906:25:02

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

sharpziplib

directory traversal

tar extraction

vulnerability

software

EPSS

0.001

Percentile

35.7%

JSON

sharpziplib is vulnerable to directory traversal. The vulnerability exists due to the TAR extraction directory path not enforced to be slash terminated allowing an attacker to create a file with a name thats begins as the destination directory one level up from the directory.