VULNERABILITY INTELLIGENCE

CVE-2024-48510

CVSS score9.8 CRITICAL

EPSS probability2.02%

CISA KEVNot currently listed

Published2024-11-13

Last modified2026-06-17

Description

Directory Traversal vulnerability in DotNetZip v.1.16.0 and before allows a remote attacker to execute arbitrary code via the src/Zip.Shared/ZipEntry.Extract.cs component NOTE: This vulnerability only affects products that are no longer supported by the maintainer.