Non notée
CVE-2018-1002203 unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary…
Description
unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| unzipper 0.8 | premières → < 0.8.13 | 0.8.13 |
Références
- snyk.io snyk.io
- github.com github.com
- snyk.io snyk.io
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification