Required CVE Record Information
Description
Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 4 Total
- https://github.com/artdarek/go-unzip/pull/2 x_transferred
- https://github.com/artdarek/go-unzip/commit/4975cbe0a719dc50b12da8585f1f207c82f7dfe0 x_transferred
- https://snyk.io/research/zip-slip-vulnerability x_transferred
- https://pkg.go.dev/vuln/GO-2020-0034 x_transferred