Lucene search
Snyk security teamNODEJS:680HistoryAug 03, 2018 - 3:08 p.m.
Arbitrary File Write via Archive Extraction
2018-08-0315:08:43
snyk security team
www.npmjs.com
541
0.001 Low
EPSS
Percentile
36.4%
Overview
Versions of unzipper before 0.8.13 are vulnerable to arbitrary file write when used to extract a specifically crafted archive that contains path traversal filenames (../../file.txt for example).
Recommendation
Update to version 0.3.18 or later.
References
Related
nvd
nvd
CVE-2018-1002203
2018-07-25 17:29:01
CVE-2018-3782
2018-08-13 19:29:02
osv
osv
CVE-2018-1002203
2018-07-25 17:29:01
Arbitrary File Write via Archive Extraction in unzipper
2018-07-27 17:06:50
veracode
veracode
Arbitrary File Write
2018-06-07 00:45:29
cvelist
cvelist
CVE-2018-1002203
2022-10-03 16:21:40
hackerone
hackerone
Node.js third-party modules: Arbitrary File Write through archive extraction
2018-06-05 16:01:18
prion
prion
Directory traversal
2018-07-25 17:29:00
cve
cve
CVE-2018-1002203
2022-10-03 16:21:40
CVE-2018-3782
2018-08-13 19:29:02
github
github
Arbitrary File Write via Archive Extraction in unzipper
2018-07-27 17:06:50
f5
f5
K64709522 : Multiple Zip Slip vulnerabilities
2018-08-03 00:00:00
checkpoint_advisories
checkpoint_advisories