Vulnerability · Published Jan 3, 2023 · Assigned by facebook
CVE-2022-36943
High 8.1
In plain English
A high-severity path traversal in SSZipArchive from ZipArchive. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.0% (higher than 62% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)1.0%top 38.4% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
SSZipArchive versions 2.5.3 and older contain an arbitrary file write vulnerability due to lack of sanitization on paths which are symlinks. SSZipArchive will overwrite files on the filesystem when opening a malicious ZIP containing a symlink as the first item.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ZipArchive | SSZipArchive | unspecified – through 2.5.3 |
Weakness: CWE-22 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H