CVE-2019-16511

Published September 19th, 2019

View on NVD ↗

CVSS v3

5.5

MEDIUM

CVSS v2

5.8

MEDIUM

Affected

PROJECTS

Description

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file (even with a ../ sequence) is concatenated with the destination path.

wixtoolset/issues

WiX Toolset Issues Tracker

GitHub

139

GitHubAssessments/CVE_Assessments_09_2019

Enpass

GitHub