zip4j

zip4j This repository contains decompiled source code for the zip4j library versions 1.3.2 vulnerable and 1.3.3 fixed for CVE-2018-1002202, for the CWE-Bench-Java dataset. The original zip4j repository on Github doesn't include code from these versions. Versions Version 1.3.2 Vulnerable Tag : 1.3...

ai.grakn:grakn-test (>=0.13.0, <=0.15.0), ai.grakn:test-integration (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.3) +804 more potentially affected by CVE-2018-1002202 via net.lingala.zip4j:zip4j (>=1.2.3, <=1.3.2)

net.lingala.zip4j:zip4j MAVEN version =1.2.3, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =1.11.0, =1.5.0, =1.0.0, =1.0.1, =1.0.4, =2.5.7, =1.1.13, =1.0.7, =1.1.4, =2.1.0, =1.0.0, =3.0.2, =1.0.3, =1.1.0 and more Source cves: CVE-2018-1002202 Source advisory: GHSA-2RPM-4X8C-PVQ...

HPESBMU03895 rev.1 - HPE Real Time Management System (RTMS), Multiple Remote Security Issues

Potential Security Impact: Remote: Arbitrary File Modification, Execution of Arbitrary Code, Execution of Arbitrary Code With Root Privileges SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Real Time Management System RTMS - 2.0,3.0,3.0.14,3.0.20,3.0.21,3.0.30,3.0.40,3.0.41 -...

CVE-2018-1002202

zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002202

CVE-2018-1002202 concerns the zip4j Java library prior to 1.3.3, vulnerable to a directory traversal (Zip-Slip) when extracting a crafted Zip entry containing "..". This can allow writing to arbitrary files on the target system. Reported impact per sources indicates potential integrity impact (hi...

CVE-2018-1002202

zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

ai.grakn:grakn-test (>=0.13.0, <=0.15.0), ai.grakn:test-integration (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.4.3) +804 more potentially affected by CVE-2018-1002202 via net.lingala.zip4j:zip4j (>=1.2.3, <=1.3.2)

net.lingala.zip4j:zip4j MAVEN version =1.2.3, =0.13.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =1.11.0, =1.5.0, =1.0.0, =1.0.1, =1.0.4, =2.5.7, =1.1.13, =1.0.7, =1.1.4, =2.1.0, =1.0.0, =3.0.2, =1.0.3, =1.1.0 and more Source cves: CVE-2018-1002202 Source advisory:...