TI-2019-08008 CVE-2019-10743 · GHSA-h74j-692g-48mq
Path traversal in archiver
Priority LOW 34
All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions.
Archiver Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Archiver Project records in CISA KEVNo Archiver Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records in Archiver · all components
TI-2018-16139 CVE-2018-1002207 · GHSA-5wmg-j84w-4jj4
Path traversal in Go standard library archiver
Priority LOW 30
mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mis…