CVE-2019-16511

Опубликовано: 19 сент. 2019

Источник: nvd

CVSS3: 5.5

CVSS2: 5.8

EPSS Низкий

Описание

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file (even with a ../ sequence) is concatenated with the destination path.

Ссылки

https://github.com/GitHubAssessments/CVE_Assessments_09_2019
https://github.com/wixtoolset/issues/issues/6075
Patch
Third Party Advisory
https://wixtoolset.org/development/wips/6075-dtf-zip-slip/
Third Party Advisory
https://www.firegiant.com/blog/2019/9/18/wix-v3.11.2-released/
Patch
Vendor Advisory
https://github.com/GitHubAssessments/CVE_Assessments_09_2019
https://github.com/wixtoolset/issues/issues/6075
Patch
Third Party Advisory
https://wixtoolset.org/development/wips/6075-dtf-zip-slip/
Third Party Advisory
https://www.firegiant.com/blog/2019/9/18/wix-v3.11.2-released/
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:firegiant:wix_toolset:*:*:*:*:*:*:*:*

Версия до 3.11.2 (исключая)

EPSS

Процентиль: 89%

0.04452

Низкий

5.5 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-p4px-wc6m-r3hr