Lucene search
GoogleOSV:GO-2021-0228HistoryJan 14, 2022 - 5:30 p.m.
Path traversal in github.com/unknwon/cae
2022-01-1417:30:28
Google
osv.dev
5
path traversal
zip archives
file manipulation
security vulnerability
github
EPSS
0.001
Percentile
43.5%
The ExtractTo function doesn’t securely escape file paths in zip archives which include leading or non-leading “…”. This allows an attacker to add or replace files system-wide.
Related
github
github
Path Traversal in github.com/unknwon/cae/zip
2021-05-18 20:31:06
prion
prion
Code injection
2020-06-23 19:38:00
nvd
nvd
CVE-2020-7664
2020-06-23 19:38:14
cvelist
cvelist
CVE-2020-7664 Arbitrary File Write via Archive Extraction (Zip Slip)
2020-06-17 16:00:17
ubuntucve
ubuntucve
CVE-2020-7664
2020-06-23 00:00:00
veracode
veracode
Arbitrary File Write
2020-06-23 23:01:18
osv
osv
Path Traversal in github.com/unknwon/cae/zip
2021-05-18 20:31:06
cve
cve
CVE-2020-7664
2020-06-23 19:38:14