Description
An issue in Zip Swift v2.1.2 allows attackers to execute a path traversal attack via a crafted zip entry.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| SwiftURL | github.com/marmelroy/Zip | <= 2.1.2 | — | GHSA-g454-wj9r-jpg4 |
High · 7.8
CVE-2023-39135
EUVD-2023-2287GHSA-g454-wj9r-jpg4
Path traversal in Zip Swift
Published Aug 30, 2023 · Updated Oct 1, 2024 · Assigned by mitre