CVE-2018-1002200
Public on 2018-06-20
Modified on 2018-07-24
Description
A path traversal vulnerability has been discovered in plexus-archiver when extracting a carefully crafted zip file which holds path traversal file names. A remote attacker could use this vulnerability to write files outside the target directory and overwrite existing files with malicious code or vulnerable configurations.
CVSS v3 Base Score
See breakdown
