Directory Traversal in SharpCompress · CVE-2018-1002206 · GitHub Advisory Database · GitHub

Directory Traversal in SharpCompress

Moderate severity GitHub Reviewed Published Sep 11, 2019 to the GitHub Advisory Database • Updated Mar 24, 2023

Package

sharpcompress (NuGet)

Affected versions

< 0.21.0

Patched versions

0.21.0

Description

SharpCompress prior to version 0.21 is vulnerable to path traversal issue in archive extraction.

References

adamhathcock/sharpcompress@80ceb1c

Reviewed Sep 3, 2019

Published to the GitHub Advisory Database Sep 11, 2019

Last updated Mar 24, 2023

Severity

Moderate

5.5

/ 10

CVSS base metrics

Attack vector

Local

Attack complexity

Low

Privileges required

None

User interaction

Required

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N