Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2021-23520

Опубликовано: 31 янв. 2022
Источник: nvd
CVSS3: 5.5
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:juce:juce:*:*:*:*:*:*:*:*
Версия до 6.1.5 (исключая)

EPSS

Процентиль: 72%
0.00738
Низкий

5.5 Medium

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

ubuntu логотип

CVE-2021-23520

CVSS3: 5.5
ubuntu
около 4 лет назад

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.

debian логотип

CVE-2021-23520

CVSS3: 5.5
debian
около 4 лет назад

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitra ...

github логотип

GHSA-qpj6-xj62-7c95

github
около 4 лет назад

The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.

EPSS

Процентиль: 72%
0.00738
Низкий

5.5 Medium

CVSS3

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-22