WordPress / WordPress/php-toolkit
Zip Slip Vulnerability
Open
Nobody has claimed this yet.
blocker
V1
- Dominant language
- PHP
- Stars
- 61
- Forks
- 21
- Avg merge
- 19h 34m
- Merged PRs (30d)
- 7
Description
As we discussed today, there's a ZIP Slip vulnerability below here. The filename should be sanitized to prevent directory traversal:
Also, maybe it's good to check for Symlinks and how they are being treated nowadays ;)
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by inspecting the ZIP handling code corresponding to src/WordPress/Zip/functions.php at the referenced line, then trace how archive filenames and symlinks are extracted. Confirm the intended traversal and symlink behavior, add coverage for the reported cases, and verify that extraction cannot write outside its destination.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 38/100