CVE-2018-17828
Public on 2018-10-01
Modified on 2020-10-22
Description
It was discovered that zziplib is vulnerable to a directory traversal flaw in most of its unzip binaries, including unzip-mem, unzzipcat-mem, unzzipcat-big, unzzipcat-mix, and unzzipcat-zip. An attacker may use this flaw to write files outside the intended target directory, overwriting existing files, or creating new ones.
CVSS v3 Base Score
See breakdown
