high8.8
CVE-2021-26629
A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation.
Impact
A path traversal vulnerability in XPLATFORM's runtime archive function could lead to arbitrary file creation. When the .xzip archive file is decompressed, an arbitrary file can be d in the parent path by using the path traversal pattern ‘..\’.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tobesoft | Xplatform | before 9.2.2.284 |