Before version 4.8.2, WordPress was vulnerable to a directory traversal attack during unzip operations in the ZipArchive and PclZip components.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-14719.json"