Lucene search
GoogleOSV:GHSA-CQJ4-M2PC-V9M5HistoryMay 13, 2022 - 1:35 a.m.
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib
2022-05-1301:35:03
Google
osv.dev
11
0.002 Low
EPSS
Percentile
51.6%
SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a …/ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as ‘Zip-Slip’.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sharpziplib | eq | 1.0.0-alpha2 | |
| sharpziplib | eq | 0.86.0 | |
| sharpziplib | eq | 1.0.0-alpha1 |
Related
veracode
veracode
Arbitrary File Writing
2018-07-09 02:13:23
cvelist
cvelist
CVE-2018-1002208
2018-07-25 17:00:00
prion
prion
Directory traversal
2018-07-25 17:29:00
nvd
nvd
CVE-2018-1002208
2018-07-25 17:29:02
ubuntucve
ubuntucve
CVE-2018-1002208
2018-07-25 00:00:00
cve
cve
CVE-2018-1002208
2018-07-25 17:29:02
osv
osv
CVE-2018-1002208
2018-07-25 17:29:02
github
github
Improper Limitation of a Pathname to a Restricted Directory in SharpZipLib
2022-05-13 01:35:03
debiancve
debiancve
CVE-2018-1002208
2018-07-25 17:29:02
nessus
nessus
Debian DLA-1564-1 : mono security update
2018-11-02 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-1564-1)
2018-11-04 00:00:00
debian
debian
[SECURITY] [DLA 1564-1] mono security update
2018-11-01 19:42:40
f5
f5
K64709522 : Multiple Zip Slip vulnerabilities
2018-08-03 00:00:00