Mantiszip
Monthly
Path traversal in MantisZip 0.4.5 and earlier lets an attacker cause files to be read or written outside the intended archive-extraction directory when a victim opens a crafted archive and triggers the Preview component, which passes untrusted entry paths into Path.Combine in MainWindow.UI.cs. The attack is remote in the sense of file delivery but entirely client-side: exploitation requires the victim to open the attacker-supplied archive (UI:P) and no authentication is involved (PR:N), so success depends on social engineering. Publicly available exploit code exists, but there is no confirmed actively exploited (CISA KEV) status; the project has not responded to the issue report and no vendor-released patch is identified, with the independent CVSS:3.1 assessment of 5.3 (low-to-moderate risk) reflecting confined impact on the host running the tool.
Path traversal in MantisZip 0.4.5 and earlier lets an attacker cause files to be read or written outside the intended archive-extraction directory when a victim opens a crafted archive and triggers the Preview component, which passes untrusted entry paths into Path.Combine in MainWindow.UI.cs. The attack is remote in the sense of file delivery but entirely client-side: exploitation requires the victim to open the attacker-supplied archive (UI:P) and no authentication is involved (PR:N), so success depends on social engineering. Publicly available exploit code exists, but there is no confirmed actively exploited (CISA KEV) status; the project has not responded to the issue report and no vendor-released patch is identified, with the independent CVSS:3.1 assessment of 5.3 (low-to-moderate risk) reflecting confined impact on the host running the tool.