CVE-2018-1002203
published 2018-07-25CVE-2018-1002203: unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip…
PriorityP339medium5.5CVSS 3.0
AVLACLPRNUIRSUCNIHAN
EPSS
11.92%
95.6th percentile
unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| node.js | unzipper | >= unspecified < 0.8.13 | 0.8.13 |
| unzipper_project | unzipper | < 0.8.13 | 0.8.13 |
| unzipper_project | unzipper | >= 0 < 0.8.13 | 0.8.13 |
CVSS provenance
nvdv3.05.5MEDIUMCVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Arbitrary File Write via Archive Extraction in unzipper
osv·2018-07-27
CVE-2018-1002203 [MEDIUM] Arbitrary File Write via Archive Extraction in unzipper
Arbitrary File Write via Archive Extraction in unzipper
Versions of `unzipper` before 0.8.13 are vulnerable to arbitrary file write when used to extract a specifically crafted archive that contains path traversal filenames (`../../file.txt` for example).
## Recommendation
Update to version 0.3.18 or later.
GHSA
Arbitrary File Write via Archive Extraction in unzipper
ghsa·2018-07-27
CVE-2018-1002203 [MEDIUM] CWE-22 Arbitrary File Write via Archive Extraction in unzipper
Arbitrary File Write via Archive Extraction in unzipper
Versions of `unzipper` before 0.8.13 are vulnerable to arbitrary file write when used to extract a specifically crafted archive that contains path traversal filenames (`../../file.txt` for example).
## Recommendation
Update to version 0.3.18 or later.
No detection rules found.
No public exploits indexed.
https://github.com/ZJONSSON/node-unzipper/commit/2220ddd5b58f6252069a4f99f9475441ad0b50cdhttps://github.com/ZJONSSON/node-unzipper/pull/59https://github.com/snyk/zip-slip-vulnerabilityhttps://snyk.io/research/zip-slip-vulnerabilityhttps://snyk.io/vuln/npm:unzipper:20180415https://github.com/ZJONSSON/node-unzipper/commit/2220ddd5b58f6252069a4f99f9475441ad0b50cdhttps://github.com/ZJONSSON/node-unzipper/pull/59https://github.com/snyk/zip-slip-vulnerabilityhttps://snyk.io/research/zip-slip-vulnerabilityhttps://snyk.io/vuln/npm:unzipper:20180415
2018-07-25
Published