VYPR

Perl Archive Zip

by Perl Archive Zip Project

CVEs (1)

  • CVE-2018-10860MedJun 29, 2018
    risk 0.39cvss 5.4epss 0.49

    perl-archive-zip is vulnerable to a directory traversal in Archive::Zip. It was found that the Archive::Zip module did not properly sanitize paths while extracting zip files. An attacker able to provide a specially crafted archive for processing could use this flaw to write or…