CVE-2020-7664
EUVD-2021-120623.06.2020, 19:38
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| compression_and_archive_extensions_project | compression_and_archive_extensions_zip_project | * |
𝑥
= Vulnerable software versions
Ubuntu Releases