OWASPASVS 5.0 requirement

ASVS-V5.3.3 Server-side file processing, such as file decompression, ignores user-provided path information to prevent vulnerabilities such as zip slip.

L3 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V5 File Handling
Section: V5.3 File Storage
Level: L3 (requirement applies from this verification level up)

Requirement

Verify that server-side file processing, such as file decompression, ignores user-provided path information to prevent vulnerabilities such as zip slip.