github - ghsa-f5c5-hmw9-v8hx

ghsa-f5c5-hmw9-v8hx

Vulnerability from github

Published

2022-12-28 00:30

Modified

2023-08-30 11:48

Severity ?

9.1 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Summary

Unzip vulnerable to path traversal

Details

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.

Show details on source website

JSON

To clipboard

{
  "affected": [
    {
      "package": {
        "ecosystem": "Go",
        "name": "github.com/yi-ge/unzip"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "1.0.3-0.20200308084313-2adbaa4891b9"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [
    "CVE-2020-36561"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-22"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2022-12-30T19:07:02Z",
    "nvd_published_at": "2022-12-27T22:15:00Z",
    "severity": "CRITICAL"
  },
  "details": "Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.",
  "id": "GHSA-f5c5-hmw9-v8hx",
  "modified": "2023-08-30T11:48:44Z",
  "published": "2022-12-28T00:30:23Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-36561"
    },
    {
      "type": "WEB",
      "url": "https://github.com/yi-ge/unzip/pull/1"
    },
    {
      "type": "WEB",
      "url": "https://github.com/yi-ge/unzip/commit/2adbaa4891b9690853ef10216189189f5ad7dc73"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/yi-ge/unzip"
    },
    {
      "type": "WEB",
      "url": "https://pkg.go.dev/vuln/GO-2020-0035"
    },
    {
      "type": "WEB",
      "url": "https://snyk.io/research/zip-slip-vulnerability"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Unzip vulnerable to path traversal"
}

cve-2020-36561

Vulnerability from cvelistv5

Published

2022-12-27 21:13

Modified

2024-08-04 17:30

Severity ?

Summary

Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory.

References

▼	URL	Tags
	https://github.com/yi-ge/unzip/pull/1
	https://github.com/yi-ge/unzip/commit/2adbaa4891b9690853ef10216189189f5ad7dc73
	https://snyk.io/research/zip-slip-vulnerability
	https://pkg.go.dev/vuln/GO-2020-0035

Impacted products

Vendor

Product

Version

▼

github.com/yi-ge/unzip

Version: 0 ≤

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T17:30:08.435Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/yi-ge/unzip/pull/1"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://github.com/yi-ge/unzip/commit/2adbaa4891b9690853ef10216189189f5ad7dc73"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://snyk.io/research/zip-slip-vulnerability"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://pkg.go.dev/vuln/GO-2020-0035"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://pkg.go.dev",
          "defaultStatus": "unaffected",
          "packageName": "github.com/yi-ge/unzip",
          "product": "github.com/yi-ge/unzip",
          "programRoutines": [
            {
              "name": "Unzip.Extract"
            }
          ],
          "vendor": "github.com/yi-ge/unzip",
          "versions": [
            {
              "lessThan": "1.0.3-0.20200308084313-2adbaa4891b9",
              "status": "affected",
              "version": "0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Due to improper path sanitization, archives containing relative file paths can cause files to be written (or overwritten) outside of the target directory."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "CWE 29: Path Traversal: \"\\..\\filename\"",
              "lang": "en"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-06-12T19:03:53.400Z",
        "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "shortName": "Go"
      },
      "references": [
        {
          "url": "https://github.com/yi-ge/unzip/pull/1"
        },
        {
          "url": "https://github.com/yi-ge/unzip/commit/2adbaa4891b9690853ef10216189189f5ad7dc73"
        },
        {
          "url": "https://snyk.io/research/zip-slip-vulnerability"
        },
        {
          "url": "https://pkg.go.dev/vuln/GO-2020-0035"
        }
      ],
      "title": "Path traversal in github.com/yi-ge/unzip"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
    "assignerShortName": "Go",
    "cveId": "CVE-2020-36561",
    "datePublished": "2022-12-27T21:13:22.650Z",
    "dateReserved": "2022-07-29T17:07:52.749Z",
    "dateUpdated": "2024-08-04T17:30:08.435Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted