Lucene search
Veracode Vulnerability DatabaseVERACODE:6582HistoryJun 06, 2018 - 8:19 a.m.
Arbitrary File Write
2018-06-0608:19:39
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
3
0.001 Low
EPSS
Percentile
47.6%
adm-zip is vulnerable to arbitrary file write. The application does not properly validate the destination filepath during compressed file extraction, allowing a malicious user to overwrite files in the target directory.
| CPE | Name | Operator | Version |
|---|---|---|---|
| adm-zip | le | 0.4.7 | |
| adm-zip | eq | 0.4.4 | |
| adm-zip-mit | le | 0.4.9 | |
| adm-zip-iconv | le | 0.4.9 | |
| adm-zip-electron | eq | 0.4.7 | |
| adm-zip-with-enc | le | 0.4.8 |
Related
github
github
Arbitrary File Write in adm-zip
2018-07-27 17:07:14
osv
osv
Arbitrary File Write in adm-zip
2018-07-27 17:07:14
CVE-2018-1002204
2018-07-25 17:29:01
nodejs
nodejs
Arbitrary File Write via Archive Extraction
2018-08-03 15:15:42
Arbitrary File Write
2019-06-18 23:54:04
cve
cve
CVE-2018-1002204
2018-07-25 17:29:01
hackerone
hackerone
Node.js third-party modules: Arbitrary File Write Through Archive Extraction
2018-06-05 15:58:26
prion
prion
Directory traversal
2018-07-25 17:29:00
nvd
nvd
CVE-2018-1002204
2018-07-25 17:29:01
cvelist
cvelist
CVE-2018-1002204
2018-07-25 17:00:00
checkpoint_advisories
checkpoint_advisories
f5
f5
K64709522 : Multiple Zip Slip vulnerabilities
2018-08-03 00:00:00
