← Database

CVE-2024-48510

CRITICAL CVSS: 9.8 Published: 2024-11-13 Modified: 2026-06-17

Description

Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

Affected Platforms

Mihula ProdotnetzipDotnetzip.Semverd Project Dotnetzip.Semverd

Weakness Type

CWE-22, CWE-22

References