Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Dotnetzip.semverd Project Clear all filters
TI-2024-32405 CVE-2024-48510 · GHSA-xhg6-9j5j-w4vf

Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote…

Priority MEDIUM 53

Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products th…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02018 Published 2024-11-13 Fixed in 1.19.0 CWE-22
TI-2018-16137 CVE-2018-1002205 · GHSA-7378-6268-4278

Path traversal in DotNetZip.Semvered

Priority LOW 37

DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.10395 Published 2018-07-25 Fixed in 1.11.0 CWE-22