CVE-2020-23171
A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file.
CVSS 3.1 · 5.5 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products