CVE-2020-7668
23.06.2020, 19:38
In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide.
| Vendor | Product | Version |
|---|---|---|
| compression_and_archive_extensions_tz_project | compression_and_archive_extensions_tz_project | * |
𝑥
= Vulnerable software versions
Ubuntu Releases