Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3phc-v747-949q

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file.

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file.

EPSS

Процентиль: 69%
0.00587
Низкий

Дефекты

CWE-610

Связанные уязвимости

CVSS3: 5.5
ubuntu
больше 4 лет назад

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file.

CVSS3: 5.5
nvd
больше 4 лет назад

A vulnerability in all versions of Nim-lang allows unauthenticated attackers to write files to arbitrary directories via a crafted zip file with dot-slash characters included in the name of the crafted file.

EPSS

Процентиль: 69%
0.00587
Низкий

Дефекты

CWE-610