8000 Zip Slip vulnerability · Issue #268 · zlib-ng/minizip-ng · GitHub
[go: up one dir, main page]
Skip to content

Zip Slip vulnerability #268

New issue
New issue
Closed
Closed
Zip Slip vulnerability#268
Labels
fixedIssue or bug has been fixedzipZIP file format

Description

@Nekto89
Nekto89
opened on Jun 10, 2018

https://github.com/snyk/zip-slip-vulnerability

Checked on latest Minizip 2.3.3. It creates file in Temp directory


minizip.exe -x -d tst zip-slip-win.zip
Minizip 2.3.3 - https://github.com/nmoinvaz/minizip
---------------------------------------------------
 Extracting: tst/good.txt
 Extracting: tst/..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\..\Temp\evil.txt

Activity

  1. nmoinvaz
    added a commit that references this issue on Jun 11, 2018

    Fixed zip slip vulnerability in example app. #268

    dd80823

  2. nmoinvaz commented on Jun 11, 2018

    @nmoinvaz
    nmoinvaz
    on Jun 11, 2018
    Member

    Fixed in dev branch. Thanks.

  3. nmoinvaz
    closed this as completedon Jun 11, 2018
  4. nmoinvaz
    added
    2.0
    bug
    fixedIssue or bug has been fixed
    zipZIP file format
    on Apr 19, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    fixedIssue or bug has been fixedzipZIP file format

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions
      0