critical9.1
CVE-2018-25046
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
Impact
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudfoundry | Archiver | before 2018-05-23 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/cloudfoundry/archiver/commit/09b5706aa9367972c09144a450bb4523049ee840
- https://pkg.go.dev/vuln/GO-2020-0025
- https://snyk.io/research/zip-slip-vulnerability
- https://github.com/cloudfoundry/archiver/commit/09b5706aa9367972c09144a450bb4523049ee840
- https://pkg.go.dev/vuln/GO-2020-0025
- https://snyk.io/research/zip-slip-vulnerability