writeups.xyz / Drupal H5P Module <= 2.0.0 (isValidPackage) Zip Slip Vulnerability

Submitter : c2a

Date: 3 December 2022

Bounty : undisclosed

Vulnerabilities :

• Zip Slip Attack
• Path Traversal
• Source Code Disclosure

Programs :

• Drupal

Authors :

• Egidio Romano / EgiX

Link :
https://karmainsecurity.com/KIS-2022-06