요약
- CVE-2018-1002206은(는) SharpCompress, sharpcompress (adamhathcock)에 영향을 주는 보통 (CVSS 5.5) 취약점입니다.
- 향후 30일 내 악용 확률(EPSS): 9.3%, 전체 취약점의 95.4%보다 높음.
- 조치: 0.21.0 이상으로 업데이트하세요.
Description
SharpCompress prior to version 0.21 is vulnerable to path traversal issue in archive extraction.
NVD description
SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free