← Back to browse · API

CVE-2021-23484

Severity
CRITICAL
CVSS
9.8
EPSS
0.0205
Risk score
39.92
CISA KEV
No
PoC
No
Published
2022-01-28
Modified
2024-09-16
First seen
2026-08-07
Aliases
EUVD-2022-1241, GHSA-WXJ7-97FP-J53J
Products
n/a:n/a n/a
Sources
euvd EUVD-2022-1241

Description

The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can lead to an extraction of a crafted file outside the intended extraction directory.

References