CVEs-PoC/2018/CVE-2018-12036.md

CVE-2018-12036

Description

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

POC

Reference

No PoCs from references.

Github

• https://github.com/jpbprakash/vuln
• https://github.com/mile9299/zip-slip-vulnerability
• https://github.com/shoucheng3/jeremylong__DependencyCheck_CVE-2018-12036_3-1-2
• https://github.com/snyk/zip-slip-vulnerability