PeaZip before 11.3.0, in a non-default configuration, is vulnerable to OS command injection via a filename in an archive because quotation character already used in the string is mishandled.
Weakness
The product validates input before it is canonicalized, which prevents the product from detecting data that becomes invalid after the canonicalization step.
Potential Mitigations
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/267.html
- https://cwe.mitre.org/data/definitions/3.html
- https://cwe.mitre.org/data/definitions/71.html
- https://cwe.mitre.org/data/definitions/78.html
- https://cwe.mitre.org/data/definitions/79.html
- https://cwe.mitre.org/data/definitions/80.html