PT-2021-12075 · Github.Com/Artdarek/Go Unzip+3 · Github.Com/Artdarek/Go-Unzip+1

Snoopysecurity

·

CVE-2020-36560

·

Published

2021-04-14

·

Updated

2025-04-11

CVSS v3.1

9.1

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions.
Description: The issue is caused by improper path sanitization, allowing archives with relative file paths to write or overwrite files outside the intended directory. This can lead to unintended file modifications.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2020-36560
GHSA-RMJ9-Q58G-9QGG
GO-2020-0034

Affected Products

Github.Com/Artdarek/Go-Unzip
Go-Unzip