Observed Zip Slip in ZIP Archive Inbound
This rule detects attempts to exploit the Zip Slip vulnerability in inbound ZIP archives. It specifically looks for the sequence '../' within the file data of a ZIP archive, which indicates an attempt to write files outside of the intended directory during extraction.
Suricata
