CVE-2022-48285

HIGH CVSS: 7.3 Published: 2023-01-29 Modified: 2026-06-17

Description

loadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.

Affected Platforms

Jszip Project Jszip

Weakness Type

CWE-22, CWE-22

References