CVE

CVE-2018-18585

CVE-2018-18585

chmd_read_headers in mspack/chmd.c in libmspack before 0.8alpha accepts a filename that has ‘{$content}’ as its first or second character (such as the "/{$content}" name).

Source: CVE-2018-18585

Exit mobile version