Unscored CVE-2021-31746 EUVD-2021-18630GHSA-w37j-mvh3-43m8

Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory traversal…

Published Dec 10, 2021 · Updated Aug 3, 2024 · Assigned by mitre

Description

Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in directory traversal and potentially arbitrary code execution.

References

https://github.com/pluck-cms/pluck/issues/100