File tree Expand file tree Collapse file tree 6 files changed +12
-12
lines changed
csharp/ql/src/Security Features/CWE-022
go/ql/src/Security/CWE-022
javascript/ql/src/Security/CWE-022
java/ql/src/Security/CWE/CWE-022
python/ql/src/experimental/Security/CWE-022
ruby/ql/src/experimental/cwe-022-zipslip Expand file tree Collapse file tree 6 files changed +12
-12
lines changed Original file line number Diff line number Diff line change 11/**
22 * @name Arbitrary file access during archive extraction ("Zip Slip")
3- * @description Accessing filesystem paths built from the name of an archive entry without
3+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
44 * validating that the destination file path is within the destination directory
5- * can allow an attacker to access unexpected resources.
5+ * can allow an attacker to unexpectedly gain access to resources.
66 * @kind path-problem
77 * @id cs/zipslip
88 * @problem.severity error
Original file line number Diff line number Diff line change 11/**
22 * @name Arbitrary file access during archive extraction ("Zip Slip")
3- * @description Accessing filesystem paths built from the name of an archive entry without
3+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
44 * validating that the destination file path is within the destination directory
5- * can allow an attacker to access unexpected resources.
5+ * can allow an attacker to unexpectedly gain access to resources.
66 * @kind path-problem
77 * @id go/zipslip
88 * @problem.severity error
Original file line number Diff line number Diff line change 11/**
22 * @name Arbitrary file access during archive extraction ("Zip Slip")
3- * @description Accessing filesystem paths built from the name of an archive entry without
3+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
44 * validating that the destination file path is within the destination directory
5- * can allow an attacker to access unexpected resources.
5+ * can allow an attacker to unexpectedly gain access to resources.
66 * @kind path-problem
77 * @id java/zipslip
88 * @problem.severity error
Original file line number Diff line number Diff line change 11/**
22 * @name Arbitrary file access during archive extraction ("Zip Slip")
3- * @description Accessing filesystem paths built from the name of an archive entry without
3+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
44 * validating that the destination file path is within the destination directory
5- * can allow an attacker to access unexpected resources.
5+ * can allow an attacker to unexpectedly gain access to resources.
66 * @kind path-problem
77 * @id js/zipslip
88 * @problem.severity error
Original file line number Diff line number Diff line change 11/**
22 * @name Arbitrary file access during archive extraction ("Zip Slip")
3- * @description Accessing filesystem paths built from the name of an archive entry without
3+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
44 * validating that the destination file path is within the destination directory
5- * can allow an attacker to access unexpected resources.
5+ * can allow an attacker to unexpectedly gain access to resources.
66 * @kind path-problem
77 * @id py/zipslip
88 * @problem.severity error
Original file line number Diff line number Diff line change 11/**
22 * @name Arbitrary file access during archive extraction ("Zip Slip")
3- * @description Accessing filesystem paths built from the name of an archive entry without
3+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
44 * validating that the destination file path is within the destination directory
5- * can allow an attacker to access unexpected resources.
5+ * can allow an attacker to unexpectedly gain access to resources.
66 * @kind path-problem
77 * @id rb/zip-slip
88 * @problem.severity error
You can’t perform that action at this time.
0 commit comments