Mat2 · Mat2 · CVE-2022-35410
**Name of the Vulnerable Software and Affected Versions**
mat2 versions prior to 0.13.0
**Description**
The issue allows `../` directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web instances, in which clients could obtain sensitive information via a crafted archive.
**Recommendations**
For versions prior to 0.13.0, update to version 0.13.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the ZIP archive cleaning process to minimize the risk of exploitation.