Security Advisory

CVE-2022-36943

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-01-03 00:00:00

Last updated 2025-04-10 15:56:21

Assigner facebook

CVSS score not scored

State PUBLISHED

Description

SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths which are symlinks. SSZipArchive will overwrite files on the filesystem when opening a malicious ZIP containing a symlink as the first item.

← Browse all CVEs View on cve.org ↗