Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The ZipCommon::isValidPath() function in Zip/src/ZipCommon.cpp in POCO C++ Libraries before 1.8 does not properly restrict the filename value in the ZIP header, which allows attackers to conduct absolute path traversal attacks during the ZIP decompression, and possibly create or overwrite arbitrary files, via a crafted ZIP file, related to a "file path injection vulnerability".
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
POCO C++ Libraries 安全漏洞
Vulnerability Description
POCO C++ Libraries是奥地利软件开发者Gunter Obiltschnig所研发的一套C++的类库，它主要用以开发基于网络的可移植的应用程序，并提供线程、文件和流等功能。 POCO C++ Libraries 1.8之前的版本中的Zip/src/ZipCommon.cpp文件‘ZipCommon::isValidPath()’函数存在安全漏洞，该漏洞源于程序没有限制ZIP包头中文件名的值。攻击者可借助特制的ZIP文件利用该漏洞创建或覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A