bestzip vulnerabilities
2 known vulnerabilities in bestzip from Nfriedly. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
2vulnerabilities
0critical
2high
0exploited
8.4average CVSS score
Latest first
- 8.4 High severity
bestzip: Improper Neutralization of Argument Delimiters in a Command
bestzip versions 2.2.6 and 3.0.2 contain an argument injection vulnerability in the nativeZip function that allows attackers to inject arbitrary arguments to the Info-ZIP backend. Attackers can supply a malicious destination path combined with crafted source e
- 8.4 High severity
bestzip: Improper Neutralization of Argument Delimiters in a Command
bestzip builds the argument list for the system zip utility without separating options from operands. The destination archive path and the caller-supplied source paths are passed to the child process with no -- delimiter between them, so any source entry begin