← Back

Compression And Archive Extensions Zip Project

compression_and_archive_extensions_zip_project

Vendor: Compression And Archive Extensions Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-7664
1Compression And Archive Extensions Project
1Compression And Archive Extensions Zip Project
Jun 17, 2026
Jun 23, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace fi...Show more
In all versions of the package github.com/unknwon/cae/zip, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide.Show less