Threats tagged 'ghsa-93m8-884p-3fww'

Detect-It-Easy versions prior to 3.21 have a path traversal vulnerability that allows attackers to write arbitrary files outside the intended extraction directory by using crafted archive entries with relative or absolute paths. This flaw can be exploited to overwrite user startup scripts, enabling persistent code execution.