CVE-2023-39139
Path traversal in Archive
Published Aug 31, 2023 · updated Feb 16, 2024
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Aug 31, 2023 · GitHub Advisory Database
Detected
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file.
Feb 16, 2024 · GitHub Advisory Database
Fix available
archive fixed in 3.3.8
Feb 16, 2024 · GitHub Advisory Database
Fix available
archive fixed in 3.3.8
Feb 16, 2024 · GitHub Advisory Database
Updated
An issue in Archive v3.3.7 allows attackers to execute a path traversal via extracting a crafted zip file.
Affected
- Pub archive0 → 3.3.8
Sources
- CVE.orgVulnerability recordCVE-2023-39139
Official CVE identifier
cve.org - GitHub Advisory DatabasePackage advisoryGHSA-9v85-q87q-g4vg
GitHub Advisory Database record mirrored by OSV.
github.com - OSV.devPackage advisoryGHSA-9v85-q87q-g4vg
Path traversal in Archive
osv.dev