Vulnerabilities > CVE-2023-28105 - Unspecified vulnerability in Go-Huge-Util Project Go-Huge-Util

CVSS 8.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

go-huge-util-project

NVD

Published: 2023-03-16

Updated: 2024-11-21

Summary

go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When users use `zip.Unzip` to unzip zip files from a malicious attacker, they may be vulnerable to path traversal. The issue has been fixed in version 0.0.34. There are no known workarounds.

Vulnerable Configurations

Part	Description	Count
Application	Go-Huge-Util_Project GO Huge Util Project GO Huge Util - GO Huge Util Project GO Huge Util 0.0.1 GO Huge Util Project GO Huge Util 0.0.2 GO Huge Util Project GO Huge Util 0.0.3 GO Huge Util Project GO Huge Util 0.0.4 GO Huge Util Project GO Huge Util 0.0.5 GO Huge Util Project GO Huge Util 0.0.6 GO Huge Util Project GO Huge Util 0.0.7 GO Huge Util Project GO Huge Util 0.0.8 GO Huge Util Project GO Huge Util 0.0.9 GO Huge Util Project GO Huge Util 0.0.10 GO Huge Util Project GO Huge Util 0.0.11 GO Huge Util Project GO Huge Util 0.0.12 GO Huge Util Project GO Huge Util 0.0.13 GO Huge Util Project GO Huge Util 0.0.14 GO Huge Util Project GO Huge Util 0.0.15 GO Huge Util Project GO Huge Util 0.0.16 GO Huge Util Project GO Huge Util 0.0.17 GO Huge Util Project GO Huge Util 0.0.18 GO Huge Util Project GO Huge Util 0.0.19 GO Huge Util Project GO Huge Util 0.0.20 GO Huge Util Project GO Huge Util 0.0.21 GO Huge Util Project GO Huge Util 0.0.22 GO Huge Util Project GO Huge Util 0.0.23 GO Huge Util Project GO Huge Util 0.0.24 GO Huge Util Project GO Huge Util 0.0.25 GO Huge Util Project GO Huge Util 0.0.26 GO Huge Util Project GO Huge Util 0.0.27 GO Huge Util Project GO Huge Util 0.0.28 GO Huge Util Project GO Huge Util 0.0.29 GO Huge Util Project GO Huge Util 0.0.30 GO Huge Util Project GO Huge Util 0.0.31 GO Huge Util Project GO Huge Util 0.0.32 GO Huge Util Project GO Huge Util 0.0.33	34

Summary

Vulnerable Configurations

References