CVE-2018-10860

What it actually does

Unsanitized path handling during zip extraction allows crafted archives to write or overwrite files outside the intended extraction directory via directory traversal sequences.

Why it matters to the business

Attackers can corrupt system files, plant malicious code, or disrupt operations on any system that processes untrusted zip archives with this library, increasing breach risk and remediation costs.

How an attack unfolds

An attacker crafts a zip archive containing files with traversal sequences such as ../../target/path, then supplies the archive to any application or user that extracts it using the vulnerable perl-archive-zip module, resulting in arbitrary file writes in the context of the extracting process.

How to fix it

Upgrade perl-archive-zip to a version that enforces path sanitization during extraction; if no patched package is available, replace the library or implement wrapper filtering that rejects any archive entry containing .. or absolute paths before extraction.

How to confirm the fix worked

Test extraction of a crafted zip containing traversal sequences in an isolated environment and confirm that files are not written outside the target directory; review package version against upstream security advisories.

Typical attack path

1. Identify or compromise a target that uses perl-archive-zip to extract archives
2. Craft a malicious zip containing traversal paths to desired write locations
3. Deliver the archive via email, web upload, or supply chain
4. Trigger extraction on the target system
5. Achieve file overwrite or code execution via planted artifacts

How to detect it

Search application and system logs for extraction operations involving zip archives with path entries containing .. sequences; inspect file system timestamps for unexpected writes during archive processing; review process execution history around zip handling utilities.

• ../
• ..\
• Archive::Zip extraction with traversal paths

What your security team should do

• Prioritize patching or replacing perl-archive-zip across all affected systems due to high EPSS and public exploitability
• Scan codebases and dependency trees for direct or transitive use of the library
• Implement archive extraction in sandboxed environments or with strict path validation
• Monitor for new fixed versions from distribution maintainers