CyberRota Analysis
AI-GeneratedThe vulnerability affects the peerigon unzip-crx and unzip-crx-3 libraries up to version 0.2.0, specifically in the unzip function of the dist/index.js file, allowing for local path traversal due to improper handling of the destination argument. Although the severity is classified as low, the potential for local exploitation means that developers using these libraries should prioritize patching or upgrading to mitigate the risk. Organizations relying on these components for archive extraction should assess their exposure and take appropriate action.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in peerigon unzip-crx and unzip-crx-3 up to 0.2.0. This affects the function unzip of the file dist/index.js of the component Archive Extraction. Executing a manipulation of the argument destination can lead to path traversal. The attack can only be executed locally. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.