CVE-2021-43099

MEDIUM

diyhi bbs 5.3 - Path Traversal via UpgradeNow Function Archive Extraction

Title source: llm

Description

An Archive Extraction (AKA "Zip Slip) vulnerability exists in bbs 5.3 in the UpgradeNow function in UpgradeManageAction.java, which unzips the arbitrary upladed zip file without checking filenames. The vulnerability is exploited using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe).

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/diyhi/bbs/issues/51

Scores

CVSS v3 4.9

EPSS 0.0109

EPSS Percentile 61.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Details

CWE

CWE-22

Status published

Products (1)

diyhi/bbs 5.3

Published Mar 28, 2022

Tracked Since Feb 18, 2026