CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
What the vulnerability does
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Ravidhu Dissanayake Upunzipper allows Path Traversal, File Manipulation.This issue affects Upunzipper: from n/a through 1.0.0.
Explanation of Vulnerability in Simple Terms
Upunzipper versions up to 1.0.0 contain a path traversal vulnerability that allows an attacker to cause a denial of service by extracting files outside the intended directory. The vulnerability requires no authentication or user interaction and can be exploited over the network. An attacker can craft a malicious archive to crash or disable the application.
What an attacker can do
Crash or disable the application by extracting files outside the intended directory.
Potential impact on your site
The application becomes unavailable or unstable when processing untrusted archive files.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
