File tree Expand file tree Collapse file tree 6 files changed +12
-12
lines changed
csharp/ql/src/Security Features/CWE-022
go/ql/src/Security/CWE-022
javascript/ql/src/Security/CWE-022
java/ql/src/Security/CWE/CWE-022
python/ql/src/experimental/Security/CWE-022
ruby/ql/src/experimental/cwe-022-zipslip Expand file tree Collapse file tree 6 files changed +12
-12
lines changed Original file line number Diff line number Diff line change 1
1
/**
2
2
* @name Arbitrary file access during archive extraction ("Zip Slip")
3
- * @description Accessing filesystem paths built from the name of an archive entry without
3
+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
4
4
* validating that the destination file path is within the destination directory
5
- * can allow an attacker to access unexpected resources.
5
+ * can allow an attacker to unexpectedly gain access to resources.
6
6
* @kind path-problem
7
7
* @id cs/zipslip
8
8
* @problem.severity error
Original file line number Diff line number Diff line change 1
1
/**
2
2
* @name Arbitrary file access during archive extraction ("Zip Slip")
3
- * @description Accessing filesystem paths built from the name of an archive entry without
3
+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
4
4
* validating that the destination file path is within the destination directory
5
- * can allow an attacker to access unexpected resources.
5
+ * can allow an attacker to unexpectedly gain access to resources.
6
6
* @kind path-problem
7
7
* @id go/zipslip
8
8
* @problem.severity error
Original file line number Diff line number Diff line change 1
1
/**
2
2
* @name Arbitrary file access during archive extraction ("Zip Slip")
3
- * @description Accessing filesystem paths built from the name of an archive entry without
3
+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
4
4
* validating that the destination file path is within the destination directory
5
- * can allow an attacker to access unexpected resources.
5
+ * can allow an attacker to unexpectedly gain access to resources.
6
6
* @kind path-problem
7
7
* @id java/zipslip
8
8
* @problem.severity error
Original file line number Diff line number Diff line change 1
1
/**
2
2
* @name Arbitrary file access during archive extraction ("Zip Slip")
3
- * @description Accessing filesystem paths built from the name of an archive entry without
3
+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
4
4
* validating that the destination file path is within the destination directory
5
- * can allow an attacker to access unexpected resources.
5
+ * can allow an attacker to unexpectedly gain access to resources.
6
6
* @kind path-problem
7
7
* @id js/zipslip
8
8
* @problem.severity error
Original file line number Diff line number Diff line change 1
1
/**
2
2
* @name Arbitrary file access during archive extraction ("Zip Slip")
3
- * @description Accessing filesystem paths built from the name of an archive entry without
3
+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
4
4
* validating that the destination file path is within the destination directory
5
- * can allow an attacker to access unexpected resources.
5
+ * can allow an attacker to unexpectedly gain access to resources.
6
6
* @kind path-problem
7
7
* @id py/zipslip
8
8
* @problem.severity error
Original file line number Diff line number Diff line change 1
1
/**
2
2
* @name Arbitrary file access during archive extraction ("Zip Slip")
3
- * @description Accessing filesystem paths built from the name of an archive entry without
3
+ * @description Extracting files from a malicious ZIP file, or similar type of archive, without
4
4
* validating that the destination file path is within the destination directory
5
- * can allow an attacker to access unexpected resources.
5
+ * can allow an attacker to unexpectedly gain access to resources.
6
6
* @kind path-problem
7
7
* @id rb/zip-slip
8
8
* @problem.severity error
You can’t perform that action at this time.
0 commit comments