ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
rspec/rules/S6096/common/fix/code-rationale.adoc
pedro-oliveira-sonarsource e035331d84 [APPSEC-73] Modify rule S6096: Educational content (C#) (#1190)
2023-03-02 18:07:54 +01:00

1 line
247 B
Plaintext
Raw Blame History

The following code is vulnerable to Zip Slip as it is constructing a path using an archive entry name. This path is then used to copy a file without being validated first. Therefore, it can be leveraged by an attacker to overwrite arbitrary files.
Reference in New Issue View Git Blame Copy Permalink