Количество 2
Количество 2
CVE-2021-23484
около 4 лет назад
The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory.
CVSS3: 9.8
EPSS: Низкий
GHSA-wxj7-97fp-j53j
около 4 лет назад
Exposure of Resource to Wrong Sphere in Zip-Local
CVSS3: 9.8
EPSS: Низкий
Уязвимостей на страницу
20
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
CVE-2021-23484 The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory. | CVSS3: 9.8 | 1% Низкий | около 4 лет назад | |
GHSA-wxj7-97fp-j53j Exposure of Resource to Wrong Sphere in Zip-Local | CVSS3: 9.8 | 1% Низкий | около 4 лет назад |
Уязвимостей на страницу
20