Mholt Archiver CVE-2018-1002207 Arbitrary File Overwrite Vulnerability
BID:107123
Info
Mholt Archiver CVE-2018-1002207 Arbitrary File Overwrite Vulnerability
| Bugtraq ID: | 107123 |
| Class: | Input Validation Error |
| CVE: |
CVE-2018-1002207 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 21 2018 12:00AM |
| Updated: | Jun 21 2018 12:00AM |
| Credit: | Snyk Security team. |
| Vulnerable: |
Mholt Archiver 3.0.1 Mholt Archiver 1.1.2 Mholt Archiver 1.1.1 Mholt Archiver 3.1 Mholt Archiver 3.0 Mholt Archiver 2.1 Mholt Archiver 2.0 Mholt Archiver 1.2 Mholt Archiver 1.1 |
| Not Vulnerable: |
Mholt Archiver 3.1.1 |
References
Mholt Archiver CVE-2018-1002207 Arbitrary File Overwrite Vulnerability
References:
References:
- Zip Slip Vulnerability (snyk.io)
- fix: prevent extraction of archived files outside target path #65 (Github)
- fix: prevent extraction of archived files outside target path (#65) (Github)
- Mholt Archiver Github Releases (Github)
- Mholt Archiver Github Repository (Github)
- Package Archiver (Go Doc)
- Arbitrary File Write via Archive Extraction (Zip Slip) (Snyk)
- BSA-2018-662 ()
- Zip Slip ()