TI-2022-17149 CVE-2022-36943
Path traversal in ZipArchive SSZipArchive
Priority HIGH 70
SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths which are symlinks.
Ziparchive Project
Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Ziparchive Project records in CISA KEVNo Ziparchive Project vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
2 records
TI-2023-20309 CVE-2023-39136 · GHSA-rh4c-32wr-89cj
An unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows…
Priority MEDIUM 58
An unhandled edge case in the component _sanitizedPath of ZipArchive v2.5.4 allows attackers to cause a Denial of Service (DoS) via a crafted zip file.