Exploitation Summary
EIP tracks 3 public exploits for CVE-2018-1002200. PoCs published by dawetmaster, andikahilmy, shoucheng3.
AI-analyzed exploit summary This repository contains the source code of the vulnerable version of Plexus Archiver (CVE-2018-1002200), which is a directory traversal vulnerability. The repository includes detailed release notes and source files but does not contain an exploit PoC or technical analysis of the vulnerability itself.
Description
plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
Exploits (3)
This repository contains the source code of the vulnerable version of Plexus Archiver (CVE-2018-1002200), which is a directory traversal vulnerability. The repository includes detailed release notes and source files but does not contain an exploit PoC or technical analysis of the vulnerability itself.
This repository contains the source code of the vulnerable version of Plexus Archiver (CVE-2018-1002200), including detailed release notes and technical documentation. It does not include an exploit PoC but provides the vulnerable codebase for analysis.
This repository appears to be a partial or incomplete snapshot of the Plexus Archiver project, specifically targeting CVE-2018-1002200. The provided files are mostly source code from the project itself, lacking any exploit or proof-of-concept code.
References (8)
Scores
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N