CVE-2018-12036

2018-06-0718:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

29.6%

JSON

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

CPENameOperatorVersion
dependencycheckeq0.2.5.2
dependencycheckeq0.2.2
dependencycheckeq0.3.2.4
dependencycheckeq0.2.5.0
dependencycheckeq1.0.7
dependencycheckeq1.2.2
dependencycheckeq1.2.5
dependencycheckeq1.1.4
dependencycheckeq1.4.5
dependencycheckeq0.2.5.1

Name	Operator	Version
dependencycheck	eq	0.2.5.2
dependencycheck	eq	0.2.2
dependencycheck	eq	0.3.2.4
dependencycheck	eq	0.2.5.0
dependencycheck	eq	1.0.7
dependencycheck	eq	1.2.2
dependencycheck	eq	1.2.5
dependencycheck	eq	1.1.4
dependencycheck	eq	1.4.5
dependencycheck	eq	0.2.5.1