zip4j

zip4j इस रिपॉजिटरी में CWE-Bench-Java डेटासेट के लिए CVE-2018-1002202 हेतु zip4j लाइब्रेरी संस्करण 1.3.2 असुरक्षित और 1.3.3 सुरक्षित का डीकंपाइल किया गया स्रोत कोड शामिल है। Github पर मूल zip4j रिपॉजिटरी में इन संस्करणों का कोड शामिल नहीं है। संस्करण संस्करण 1.3.2 असुरक्षित टैग : 1.3.2 स्थिति : प...

CVE-2018-1002202

zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002202

CVE-2018-1002202 concerns the zip4j Java library prior to 1.3.3, vulnerable to a directory traversal (Zip-Slip) when extracting a crafted Zip entry containing "..". This can allow writing to arbitrary files on the target system. Reported impact per sources indicates potential integrity impact (hi...

CVE-2018-1002202

zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...