critical9.3
CVE-2023-0104
The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file.
Impact
The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Weintek | Easybuilder Pro | before 6.07.02.480 from 6.08.01.190 before 6.08.01.350 |