Unzipper

unzipper

Vendor: Unzipper Project • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2018-1002203

1Unzipper Project

1Unzipper

Nov 21, 2024

Jul 25, 2018

N/A· v4

5.5 MEDIUM· v3

4.3 MEDIUM· v2

unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerab...Show more