CVE-2019-16511: Firegiant Wix Toolset

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file (even with a ../ sequence) is concatenated with the destination path.

Affected products

• Firegiant Wix Toolset: before 3.11.2 (fixed in 3.11.2)

Published 2019-09-19. Last modified 2026-06-17.