Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-28105

Go-huge-util vulnerable to path traversal when unzipping files

Description

go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When users use `zip.Unzip` to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. The issue has been fixed in version 0.0.34. There are no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

dablelv go-huge-util

  • < 0.0.34affected

References