{"id":"CVE-2021-23520","aliases":["DEBIAN-CVE-2021-23520","EUVD-2021-10487","GHSA-qpj6-xj62-7c95","SNYK-UNMANAGED-JUCEFRAMEWORKJUCE-2388607","UBUNTU-CVE-2021-23520"],"status":"published","title":"Arbitrary File Write via Archive Extraction (Zip Slip)","description":"The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.","severity":{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01094,"percentile":0.65933,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-22"],"published":"2022-01-31T10:56:15Z","modified":"2026-10-23T18:03:11Z","fixes":[{"ecosystem":"Debian:12","package":"juce","fixed_in":["6.1.5~ds0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"juce","fixed_in":["6.1.5~ds0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"juce","fixed_in":["6.1.5~ds0-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.5~ds0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.5~ds0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.5~ds0-1"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.1.0+repack-3"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.3.0~repack-1","5.2.0~repack-1","5.2.0~repack-2","5.2.0~repack-3","5.2.1~repack-1","5.2.1~repack-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.4~repack0-3","5.4.5~ds0-1","5.4.6~ds0-1","5.4.7~ds0-1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.7~ds0-2","6.1.3~ds0-1","6.1.4~ds0-1","6.1.5~ds0-1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["7.0.5+ds-1","7.0.5+ds-1build1","7.0.5+ds-1build2","7.0.5+ds-2"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0.6+ds-2"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0.12+ds-1","8.0.13+ds-1","8.0.14+ds-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"juce","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["8.0.6+ds-2","8.0.12+ds-1"]}],"products":[{"vendor":"juce","product":"juce"}],"references":[{"url":"https://snyk.io/research/zip-slip-vulnerability","tags":["x_refsource_MISC","x_transferred","Exploit","Technical Description","Third Party Advisory","evidence","report"]},{"url":"https://snyk.io/vuln/SNYK-UNMANAGED-JUCEFRAMEWORKJUCE-2388607","tags":["x_refsource_MISC","x_transferred","Exploit","Patch","Third Party Advisory","fix","report"]},{"url":"https://github.com/juce-framework/JUCE/commit/2e874e80cba0152201aff6a4d0dc407997d10a7f","tags":["x_refsource_MISC","x_transferred","Patch","Third Party Advisory","fix","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-23520"},{"url":"https://github.com/advisories/GHSA-qpj6-xj62-7c95"},{"url":"https://security-tracker.debian.org/tracker/CVE-2021-23520","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2021-23520","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-23520","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2021-23520","title":"Arbitrary File Write via Archive Extraction (Zip Slip)","description":"The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.","status":"published","published":"2022-01-31T10:56:15.581Z","modified":"2024-09-16T22:46:03.25Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:00.488332Z"}],"euvd":[{"id":"EUVD-2021-10487","description":"The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.","status":"published","published":"2022-01-31T10:56:15Z","modified":"2024-09-16T22:46:03Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-03T00:54:59.7394Z"}],"ghsa":[{"id":"GHSA-qpj6-xj62-7c95","title":"The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive...","description":"The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.","status":"published","published":"2022-02-01T00:00:38Z","modified":"2023-02-03T05:05:16Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:53:42.900002Z"}],"nvd":[{"id":"CVE-2021-23520","description":"The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.","status":"published","published":"2022-01-31T11:15:07.82Z","modified":"2026-06-17T03:38:48.873Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:07:04.178977Z"}],"osv":[{"id":"CVE-2021-23520","description":"The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.","status":"published","published":"2022-01-31T11:15:07.82Z","modified":"2026-10-20T14:24:30.566792094Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:18.778776Z"},{"id":"DEBIAN-CVE-2021-23520","description":"The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.","status":"published","published":"2022-01-31T11:15:07.82Z","modified":"2026-10-23T18:03:11.984512142Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:34.637046Z"},{"id":"UBUNTU-CVE-2021-23520","description":"The package juce-framework/juce before 6.1.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) via the ZipFile::uncompressEntry function in juce_ZipFile.cpp. This vulnerability is triggered when the archive is extracted upon calling uncompressTo() on a ZipFile object.","status":"published","published":"2022-01-31T11:15:00Z","modified":"2026-10-17T12:57:12.379143266Z","cvss":[{"version":"3.1","score":5.5,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:26.779273Z"}]}}