Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Archiver Project Clear all filters
TI-2019-08008 CVE-2019-10743 · GHSA-h74j-692g-48mq

Path traversal in archiver

Priority LOW 34

All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.06352 Published 2019-10-28 Partial fix · 3.3.2 CWE-22
TI-2018-16139 CVE-2018-1002207 · GHSA-5wmg-j84w-4jj4

Path traversal in Go standard library archiver

Priority LOW 30

mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mis…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.0253 Published 2018-07-25 Fixed in e4ef56d, 2.1.0 CWE-22