GHSA-g454-wj9r-jpg4

Source

https://github.com/advisories/GHSA-g454-wj9r-jpg4

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/08/GHSA-g454-wj9r-jpg4/GHSA-g454-wj9r-jpg4.json

Aliases

• CVE-2023-39135

Published

2023-08-31T00:30:17Z

Modified

2024-02-09T00:32:14Z

Summary

Path traversal in Zip Swift

Details

An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-39135
• https://github.com/marmelroy/Zip/issues/245
• https://blog.ostorlab.co/zip-packages-exploitation.html
• https://github.com/marmelroy/Zip
• https://ostorlab.co/vulndb/advisory/OVE-2023-1
• https://security.snyk.io/research/zip-slip-vulnerability