CVE-2021-23520

CVE-2021-23520 is a critical arbitrary file write vulnerability, known as Zip Slip, affecting juce-framework/juce versions prior to 6.1.5. This flaw allows an attacker to write files to arbitrary locations on a system when a malicious archive is extracted using the ZipFile::uncompressEntry function. With a CVSS score of 9.8 (Critical), it presents a severe risk due to its network-based attack vector, low complexity, and potential for complete compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.