Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the do_extract_currentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
miniunzip miniunzip 路径遍历漏洞
Vulnerability Description
minizip是一套轻量级压缩/解压缩工具。miniunzip是其中的一个解压缩组件。 minizip 1.1-5之前版本中的miniunzip的miniunz.c文件的‘do_extract_currentfile’函数存在目录遍历漏洞。远程攻击者借助ZIP归档文件中特制的条目利用该漏洞对任意文件执行写入操作。
CVSS Information
N/A
Vulnerability Type
N/A