CyberRota Analysis
AI-GeneratedA vulnerability exists that allows high-privileged remote attackers to upload malicious ZIP archives containing directory traversal sequences, enabling them to escape the designated extraction directory and write files to arbitrary locations on the server. This improper validation of archive entry paths could lead to arbitrary code execution, posing a significant risk of full system compromise. Organizations using affected products should prioritize remediation efforts to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A high-privileged remote attacker can upload malicious ZIP archive containing directory traversal sequences such as ../ can escape the intended extraction directory and write files to arbitrary locations on the server, potentially achieve arbitrary code execution due to improper validation of archive entry paths before writing files to disk which could result in full system compromise.