Skip to content

Vendor

adm-zip project vulnerabilities

1 published CVE affecting adm-zip project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of adm-zip project alerts

Products

Latest adm-zip project CVEs

Newest publication first

  1. CVE-2018-1002204 Arbitrary File Write in adm-zip

    Published
    MediumCVSS 5.5 EPSS 13.5%

    adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.