Lucene search

sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)

🗓️ 24 Oct 2023 01:04:51Reported by GitHub Advisory DatabaseType

sbt vulnerability in archive extraction (Zip Slip) allows arbitrary file writ

Reporter	Title	Published	Views	Family All 12
CVE	CVE-2023-46122	23 Oct 202316:15	–	cve
Veracode	Arbitrary File Write	24 Oct 202304:47	–	veracode
OSV	sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)	24 Oct 202301:51	–	osv
OSV	CVE-2023-46122	23 Oct 202316:15	–	osv
Tenable Nessus	SUSE SLED15 / SLES15 / openSUSE 15 Security Update : maven, maven-resolver, sbt, xmvn (SUSE-SU-2023:4527-1)	24 Nov 202300:00	–	nessus
Cvelist	CVE-2023-46122 Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt	23 Oct 202315:51	–	cvelist
Vulnrichment	CVE-2023-46122 Arbitrary file write via archive extraction (Zip Slip) vulnerability in sbt	23 Oct 202315:51	–	vulnrichment
Prion	Code injection	23 Oct 202316:15	–	prion
OpenVAS	openSUSE: Security Advisory for maven, maven (SUSE-SU-2023:4527-1)	4 Mar 202400:00	–	openvas
OpenVAS	SUSE: Security Advisory (SUSE-SU-2023:4527-1)	23 Nov 202300:00	–	openvas

Vulners

Node

org.scala-sbt io_3Range1.0.0–1.9.7

org.scala-sbt io_2.13Range1.0.0–1.9.7

org.scala-sbt io_2.12Range1.0.0–1.9.7

org.scala-sbt sbtRange0.3.4–1.9.7

Source	Link
github	www.github.com/sbt/sbt/security/advisories/GHSA-h9mw-grgx-2fhf
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-46122
github	www.github.com/sbt/io/issues/358
github	www.github.com/sbt/io/pull/360
github	www.github.com/sbt/io/commit/124538348db0713c80793cb57b915f97ec13188a
github	www.github.com/advisories/GHSA-h9mw-grgx-2fhf

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 Oct 2023 01:51Current

6.8Medium risk

Vulners AI Score6.8

EPSS0.001

CWE-22