Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2018-1002202HistoryJul 25, 2018 - 5:29 p.m.
CVE-2018-1002202
2018-07-2517:29:00
Debian Security Bug Tracker
security-tracker.debian.org
7
0.002 Low
EPSS
Percentile
53.8%
zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a …/ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as ‘Zip-Slip’.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | zip4j | < 2.11.5-1 | zip4j_2.11.5-1_all.deb |
| Debian | 11 | all | zip4j | < 2.6.4-1 | zip4j_2.6.4-1_all.deb |
| Debian | 999 | all | zip4j | < 2.11.5-1 | zip4j_2.11.5-1_all.deb |
| Debian | 13 | all | zip4j | < 2.11.5-1 | zip4j_2.11.5-1_all.deb |
Related
veracode
veracode
Arbitrary File Write
2018-06-06 08:54:26
prion
prion
Directory traversal
2018-07-25 17:29:00
osv
osv
Improper Limitation of a Pathname to a Restricted Directory in Zip4j
2022-05-13 01:35:04
cve
cve
CVE-2018-1002202
2018-07-25 17:29:00
redhatcve
redhatcve
CVE-2018-1002202
2018-06-06 14:26:37
cvelist
cvelist
CVE-2018-1002202
2018-07-25 17:00:00
github
github
Improper Limitation of a Pathname to a Restricted Directory in Zip4j
2022-05-13 01:35:04
f5
f5
K64709522 : Multiple Zip Slip vulnerabilities
2018-08-03 00:00:00
ibm
ibm
Security Bulletin: IBM Controller has addressed multiple vulnerabilities
2024-05-01 21:46:16