Количество 4
Количество 4
CVE-2020-7664
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide.
CVE-2020-7664
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide.
CVE-2020-7664
In all versions of the package github.com/unknwon/cae/zip, the Extract ...
GHSA-vpx7-vm66-qx8r
Path Traversal in github.com/unknwon/cae/zip
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2020-7664 In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide. | CVSS3: 7.5 | 0% Низкий | больше 5 лет назад |
 | CVE-2020-7664 In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide. | CVSS3: 7.5 | 0% Низкий | больше 5 лет назад |
| CVE-2020-7664 In all versions of the package github.com/unknwon/cae/zip, the Extract ... | CVSS3: 7.5 | 0% Низкий | больше 5 лет назад |
| GHSA-vpx7-vm66-qx8r Path Traversal in github.com/unknwon/cae/zip | CVSS3: 7.5 | 0% Низкий | больше 4 лет назад |
Уязвимостей на страницу