← Back

Compression And Archive Extensions Tz Project

compression_and_archive_extensions_tz_project

Vendor: Compression And Archive Extensions Tz Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-7668
1Compression And Archive Extensions Tz Project
1Compression And Archive Extensions Tz Project
Jun 17, 2026
Jun 23, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace fil...Show more
In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide.Show less