rpm package
suse/perl-Archive-Zip&distro=SUSE Linux Enterprise Desktop 12 SP3
pkg:rpm/suse/perl-Archive-Zip&distro=SUSE%20Linux%20Enterprise%20Desktop%2012%20SP3
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2018-10860 | Med | 5.4 | < 1.34-3.3.1 | 1.34-3.3.1 | Jun 29, 2018 | perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or ov |
- affected < 1.34-3.3.1fixed 1.34-3.3.1
perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or ov