Lucene search
GoogleOSV:CVE-2018-1261HistoryMay 11, 2018 - 8:29 p.m.
CVE-2018-1261
2018-05-1120:29:00
Google
osv.dev
5
Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
Related
f5
f5
K23985340 : Spring Integration Zip vulnerability CVE-2018-1261
2018-05-29 00:00:00
prion
prion
Path traversal
2018-05-11 20:29:00
Path traversal
2018-05-15 20:29:00
nvd
nvd
CVE-2018-1261
2018-05-11 20:29:00
CVE-2018-1263
2018-05-15 20:29:00
osv
osv
Path traversal in org.springframework.integration:spring-integration-zip
2018-10-18 18:05:46
CVE-2018-1263
2018-05-15 20:29:00
spring-integration-zip Arbitrary File Write
2022-05-13 01:07:04
github
github
Path traversal in org.springframework.integration:spring-integration-zip
2018-10-18 18:05:46
spring-integration-zip Arbitrary File Write
2022-05-13 01:07:04
veracode
veracode
Arbitrary File Write
2018-05-10 06:14:04
Arbitrary File Write
2018-05-14 03:51:04
cve
cve
CVE-2018-1261
2018-05-11 20:29:00
CVE-2018-1263
2018-05-15 20:29:00
cvelist
cvelist
CVE-2018-1261
2018-05-09 00:00:00
CVE-2018-1263
2018-05-09 00:00:00
checkpoint_advisories
checkpoint_advisories