Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

TI-2018-16138 CVE-2018-1002206 · GHSA-fxh6-w476-hgr4

Path traversal in SharpCompress

Priority LOW 37

SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction.

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.09332 Published 2018-07-25 Fixed in 0.21.0 CWE-22