We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
In IZArc through 4.5, there is a Mark-of-the-Web Bypass Vulnerability. When a user performs an extraction from an archive file that bears Mark-of-the-Web, Mark-of-the-Web is not propagated to the extracted files.
Reserved 2025-04-26 | Published 2025-04-26 | Updated 2025-04-28 | Assigner mitreCWE-830 Inclusion of Web Functionality from an Untrusted Source
github.com/.../IZArc Mark-of-the-Web Bypass Vulnerability.md
github.com/...rgonis/security/advisories/GHSA-637g-8v47-79mv
Support options