Skip to content
OpenAdvisories

Package · Debian

juce

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 5.5
    CVE-2021-23520

    Arbitrary File Write via Archive Extraction (Zip Slip)

    The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling unc…

    juce juce Debian Ubuntu
  • Medium 5.5
    CVE-2021-23521

    Link Following

    This affects the package juce-framework/JUCE before 6.1.5. This vulnerability is triggered when a malicious archive is crafted with an entry containing a symbolic link. When extracted, the symbolic link is followed outside of the target dir allowing writing a…

    juce juce Debian Ubuntu