VYPR

Archiver

by Archiver Project

CVEs (1)

  • CVE-2019-10743MedOct 29, 2019
    risk 0.29cvss 5.5epss 0.07

    All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated to the target…