Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A path traversal vulnerability exists in the ZIP extraction API of Zdir Pro 4.x. When a crafted ZIP archive is processed by the backend at /api/extract, files may be written outside the intended directory, leading to arbitrary file overwrite and potentially remote code execution
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Zdir Pro 安全漏洞
Vulnerability Description
Zdir Pro是中国Zdir Pro公司的一个多功能私有存储程序。 Zdir Pro 4.x版本存在安全漏洞，该漏洞源于ZIP提取API存在路径遍历，可能导致处理特制ZIP归档时文件写入预期目录之外，造成任意文件覆盖和潜在的远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A