Zip Slip Vulnerability Let Attacker Import Malicious Code and Execute Arbitrary Code

According to SonarCloud, the Zip Slip vulnerability in OpenRefine allows attackers to overwrite existing files or the extraction of contents to unexpected locations. This vulnerability is caused by insufficient path validation while extracting archives.

Source: GBHackers

 


Date:

Categorie(s):