exploitDog

CVE-2023-39135

Опубликовано: 30 авг. 2023

Источник: nvd

CVSS3: 7.8

EPSS Низкий

Описание

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry.

Ссылки

https://blog.ostorlab.co/zip-packages-exploitation.html
Exploit
Third Party Advisory
https://github.com/marmelroy/Zip/issues/245
Exploit
Issue Tracking
Vendor Advisory
https://ostorlab.co/vulndb/advisory/OVE-2023-1
Exploit
Third Party Advisory
https://security.snyk.io/research/zip-slip-vulnerability
Third Party Advisory
https://blog.ostorlab.co/zip-packages-exploitation.html
Exploit
Third Party Advisory
https://github.com/marmelroy/Zip/issues/245
Exploit
Issue Tracking
Vendor Advisory
https://ostorlab.co/vulndb/advisory/OVE-2023-1
Exploit
Third Party Advisory
https://security.snyk.io/research/zip-slip-vulnerability
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:marmelroy:zip:2.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.00472

Низкий

7.8 High

CVSS3

Дефекты

CWE-22

Связанные уязвимости

GHSA-g454-wj9r-jpg4

CVSS3: 7.8

github

больше 2 лет назад

Path traversal in Zip Swift

EPSS

Процентиль: 64%

0.00472

Низкий

7.8 High

CVSS3

Дефекты

CWE-22