Stats
- First seen
- April 2023
- Last seen
- October 2025
Description
Detects an archive exploiting CVE-2022-1271, an arbitrary file write in the gzip compression tools' zgrep handling. The crafted archive manipulates filename processing so that script invocations write or overwrite files outside the intended path.