Home > Vulnerability Database > WS-2019-0231

WhiteSource Vulnerability Database

WS-2019-0231

Good to know:

Date: April 22, 2018

adm-zip versions before 0.4.9 are vulnerable to Arbitrary File Write due to extraction of a specifically crafted archive that contains path traversal filenames

Language: JS

Severity Score

0.0

Related Resources (3)

Url: https://hackerone.com/reports/362118

Url: https://github.com/cthackers/adm-zip/commit/6f4dfeb9a2166e93207443879988f97d88a37cde

Url: https://www.whitesourcesoftware.com/vulnerability-database/WS-2019-0231

Weakness Type (CWE)

Path Traversal

CWE-22

Top Fix

Upgrade Version

Upgrade to version 0.4.9

Learn More