Em resumo
- CVE-2018-1002206 é uma vulnerabilidade MÉDIO (CVSS 5.5) que afeta SharpCompress, sharpcompress (adamhathcock).
- Chance de exploração nos próximos 30 dias (EPSS): 9.3%, maior que 95.4% das vulnerabilidades.
- Correção: atualize para 0.21.0 ou posterior.
Description
SharpCompress prior to version 0.21 is vulnerable to path traversal issue in archive extraction.
NVD description
SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free