CVE-2020-9479

unzip directory traversal

State: Published
Severity: Not scored
Published: Mar 1, 2021
Updated: Feb 13, 2025
Reserved: Mar 1, 2020

Description

When loading a UDF, a specially crafted zip file could allow files to be placed outside of the UDF deployment directory. This issue affected Apache AsterixDB unreleased builds between commits 580b81aa5e8888b8e1b0620521a1c9680e54df73 and 28c0ee84f1387ab5d0659e9e822f4e3923ddc22d. Note: this CVE may be REJECTed as the issue did not affect any released versions of Apache AsterixDB

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Apache AsterixDBApache Software Foundation	Apache AsterixDB gitAffected

References

https://www.openwall.com/lists/oss-security/2020/08/08/2
[asterixdb-dev] 20210301 Re: [EXT] Re: CVE Publication Service Request 941606mailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.