Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:7889
HistoryNov 27, 2018 - 8:18 a.m.

Arbitrary File Writes And Directory Creation

2018-11-2708:18:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
17

EPSS

0.001

Percentile

50.1%

microsoft.netcore.app (System.IO.Compression.ZipFile) is vulnerable to arbitrary file writes and directory creation. The vulnerability can be triggered because it does not properly validate the trailing separator for nested paths.