Skip to content
OpenAdvisories

Vendor

cthackers

9 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Low 3.7

    adm-zip through 0.6.1 Duplicate-Entry Validation Bypass via Canonically Equivalent Names

    adm-zip through 0.6.1 contains a duplicate-entry validation bypass that allows attackers to evade the readEntries() check by using canonically equivalent entry names like './hello.txt' and 'hello.txt'. Attackers can craft ZIP archives where getEntry() or read…