035179593513 [email protected]

Fixing a Zip Path Traversal Vulnerability

by | Oct 29, 2021 | New Page Examples | 0 comments

org.apache.cordova.Zip.unzipSync in IONIC and Cordova folders:

node_modules\cordova-plugin-zip\src\android\Zip.java && /plugins

replace if(file.exists() || file.createNewFile()){

with

if(file.exists() || file.createNewFile() || file.getCanonicalPath().startsWith(outputDirectory)){

Submit a Comment

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

en_USEnglish
de_DEDeutsch en_USEnglish