CVE-2021-31746

2021-12-1017:45:34

mitre

www.cve.org

zip slip

pluck-cms

directory traversal

code execution

AI Score

9.9

Confidence

High

EPSS

0.004

Percentile

72.8%

JSON

Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory traversal and potentially arbitrary code execution.

References

github.com/pluck-cms/pluck/issues/100