VYPR

rpm package

suse/perl-Archive-Zip&distro=SUSE Linux Enterprise Server for SAP Applications 11 SP4

pkg:rpm/suse/perl-Archive-Zip&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2011%20SP4

Vulnerabilities (1)

  • CVE-2018-10860MedJun 29, 2018
    affected < 1.24-4.3.1fixed 1.24-4.3.1

    perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or ov