CVE-2019-10743
MEDIUM 5.5EPSS 6.4%
All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that holds path traversal filenames. When exploited, a filename in a malicious archive is concatenated to the target extraction directory, which results in the final path ending up outside of the target folder. For instance, a zip may hold a file with a "../../file.exe" location and thus break out of the target folder. If an executable or a configuration file is overwritten with a file containing malicious code, the problem can turn into an arbitrary code execution issue quite easily.
- Affected
- archiver
- CVSS v3.1 NVD
- 5.5 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N - CVSS v2.0 NVD
- 5.8 MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:P - EPSS
- 6.35% chance of exploitation in the next 30 days, 94th percentile
- Published
- 2019-10-28
- Updated
- 2024-08-04
Proof-of-concept exploits (1)
- albisorua/PoC-CVE-2019-107430★ · 2025-07-09
Security advisories
- https://snyk.io/research/zip-slip-vulnerability
- https://snyk.io/vuln/SNYK-GOLANG-GITHUBCOMMHOLTARCHIVERCMDARC-174728
- advisories/GHSA-h74j-692g-48mq
- mholt/archiver/pull/169