Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:38804
HistoryJan 09, 2023 - 10:44 a.m.

Arbitrary File Write

2023-01-0910:44:25
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
arbitrary file writes
libziparchive.so
symlink vulnerability
file system
software

EPSS

0.001

Percentile

39.4%

libziparchive.so is vulnerable to arbitrary file writes. The vulnerability exists due to lack of sanitization on paths which allows an attacker to overwrite files on the file system when opening a malicious ZIP with symlink.

EPSS

0.001

Percentile

39.4%

Related for VERACODE:38804