Lucene search
Veracode Vulnerability DatabaseVERACODE:39140HistoryFeb 06, 2023 - 4:51 a.m.
Directory Traversal
2023-02-0604:51:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
67
jszip
vulnerability
directory traversal
untrusted user input
validation
zip archive
exploitation
0.006 Low
EPSS
Percentile
79.4%
jszip is vulnerable to Directory Traversal. The vulnerability exists as untrusted user input is not properly validated and/or sanitized, allowing an attacker to exploit the vulnerability via a crafted ZIP archive.
Related
ibm
ibm
debiancve
debiancve
CVE-2022-48285
2023-01-29 05:15:10
osv
osv
JSZip contains Path Traversal via loadAsync
2023-01-29 06:30:52
CVE-2022-48285
2023-01-29 05:15:10
cbl_mariner
cbl_mariner
CVE-2022-48285 affecting package mozjs for versions less than 102.15.1-1
2024-03-19 17:21:46
CVE-2022-48285 affecting package mozjs60 60.9.0-11
2023-07-28 23:16:55
nvd
nvd
CVE-2022-48285
2023-01-29 05:15:10
github
github
JSZip contains Path Traversal via loadAsync
2023-01-29 06:30:52
cvelist
cvelist
CVE-2022-48285
2023-01-29 00:00:00
redhatcve
redhatcve
CVE-2022-48285
2023-01-31 05:35:23
prion
prion
Directory traversal
2023-01-29 05:15:00
cve
cve
CVE-2022-48285
2023-01-29 05:15:10
ubuntucve
ubuntucve
CVE-2022-48285
2023-01-29 00:00:00
nessus
nessus
RHEL 8 : jszip (Unpatched Vulnerability)
2024-05-11 00:00:00
Oracle Primavera Unifier (Jul 2023 CPU)
2023-07-26 00:00:00
Oracle Primavera Gateway (Jul 2023 CPU)
2023-07-19 00:00:00
redhat
redhat
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00