CVE-2022-24254

Description

An unrestricted file upload vulnerability in the Backup/Restore Archive component of Extensis Portfolio v4.0 allows remote attackers to execute arbitrary code via a crafted ZIP file.

References

https://www.whiteoaksecurity.com/blog/extensis-portfolio-vulnerability-disclosure/

https://snyk.io/research/zip-slip-vulnerability

http://portfolio.com

http://extensis.com

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS