Read the docs

Dotnetzip.semverd Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Dotnetzip.semverd Project records in CISA KEV

No Dotnetzip.semverd Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Dotnetzip.semverd 2 records MEDIUM

Records

2 records in Dotnetzip.semverd · all components

TI-2024-32405 CVE-2024-48510 · GHSA-xhg6-9j5j-w4vf

Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote…

Priority MEDIUM 53

Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products th…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02018 Published 2024-11-13 Fixed in 1.19.0 CWE-22
TI-2018-16137 CVE-2018-1002205 · GHSA-7378-6268-4278

Path traversal in DotNetZip.Semvered

Priority LOW 37

DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.10395 Published 2018-07-25 Fixed in 1.11.0 CWE-22
Open these records in search →