CVE-2021-31746

2021-12-1018:15:07

Google

osv.dev

cve-2021-31746

zip slip

pluck-cms

directory traversal

arbitrary code execution

software

AI Score

7.6

Confidence

High

EPSS

0.004

Percentile

72.8%

JSON

Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory traversal and potentially arbitrary code execution.

References

github.com/pluck-cms/pluck/issues/100