We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Assigner | mitre |
Reserved | 2023-01-29 |
Published | 2023-01-29 |
Updated | 2024-08-03 |
loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.
https://github.com/Stuk/jszip/commit/2edab366119c9ee948357c02f1206c28566cdf15
https://www.mend.io/vulnerability-database/WS-2023-0004
https://exchange.xforce.ibmcloud.com/vulnerabilities/244499
https://github.com/Stuk/jszip/compare/v3.7.1...v3.8.0
https://security.netapp.com/advisory/ntap-20240621-0005/