Search vulnerabilities

Results 1

Export CSV
CVE-2018-1002201

zt-zip: arbitrary file write vulnerability / arbitrary code execution using a specially crafted zip file

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

CVSS 3.1 · 5.5 Medium EPSS 10.4% KEV · Not listed
Vendors
Products