Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Open-source ARJ archiver 目录遍历漏洞
Vulnerability Description
ARJ是美国软件开发者Robert Jung所研发的一套文件归档软件，它支持长文件名、文件版本管理和数据损坏保护等。Open-source ARJ archiver是一个ARJ归档的开源实现。 Open-source ARJ archiver 3.10.22版本中存在安全漏洞，该漏洞源于程序没有正确删除路径中的前导斜杠。远程攻击者可通过在ARJ存档文件中的路径中添加多个前导斜杠利用该漏洞实施绝对路径遍历攻击，写入任意文件，
CVSS Information
N/A
Vulnerability Type
N/A