Not scoredCWE-22
CVE-2018-1002208
SharpZipLib vulnerability
Status
- Not in CISA KEV
- Fixed in version 1.0
Exploit probabilityEPSSchecked 25 Oct
9.9%probability of exploitation in the next 30 days
Higher than 96% of scored CVEs
SeverityCVSS
–Not scored yet
Description NVD
SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Coverage No articles yet
No CyberSIXT article names CVE-2018-1002208 yet. New articles appear here and in the RSS feed.