CVE-2020-7668

HIGH · CVSS 7.5 EPSS 1.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2020-06-23 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2020-7668

Severity

HIGH

CVSS

7.5

EPSS

1.33%

GitHub

Original NVD Description

In all versions of the package github.com/unknwon/cae/tz, the ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide.