| ID |
CVE-2021-32840
|
| Sažetak |
SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry `../evil.txt` may be extracted in the parent directory of `destFolder`. This leads to arbitrary file write that may lead to code execution. The vulnerability was patched in version 1.3.3. |
| Reference |
|
| CVSS |
| Base: | 7.5 |
| Impact: | 6.4 |
| Exploitability: | 10.0 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| PARTIAL |
PARTIAL |
PARTIAL |
|
| CVSS vektor |
AV:N/AC:L/Au:N/C:P/I:P/A:P |
| Zadnje važnije ažuriranje |
07-02-2022 - 19:10 |
| Objavljeno |
26-01-2022 - 21:15 |
