Compression And Archive Extensions Project

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Compression And Archive Extensions Project records in CISA KEV

No Compression And Archive Extensions Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Compression And Archive Extensions Zip Project 1 record LOW

Records

1 record

TI-2020-06184 CVE-2020-7664 · GHSA-vpx7-vm66-qx8r

Arbitrary File Write via Archive Extraction (Zip Slip)

LOW 36

In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..".

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01455 Published 2020-06-17 Fixed in 1.0.1 CWE-22

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0