Compression And Archive Extensions Zip Project
1 CVEs
product
Monthly
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Path Traversal
Compression And Archive Extensions Zip Project
NVD
CVSS 3.1
7.5
EPSS
1.4%
EPSS 1%
CVSS 7.5
HIGH
POC
PATCH
This Week
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Path Traversal
Compression And Archive Extensions Zip Project
NVD