CVE-2022-24254

Summary

An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted ZIP file.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://snyk.io/research/zip-slip-vulnerability
• http://extensis.com
• http://portfolio.com
• https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/

References

• https://snyk.io/research/zip-slip-vulnerability
• https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/

• ←Previous
• Next→