CVE-2018-17297

The vulnerability CVE-2018-17297 affects Hutool’s ZipUtil unzip implementation prior to 4.1.12, where directory traversal in a ZIP entry filename can overwrite arbitrary files. This is triggered during extraction of ZIP archives and has potential to impact file integrity on the host system. Affec...

CVE-2018-17297

The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive...

CVE-2018-17297: Improper Limitation of a Pathname to a Restricted Directory

The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive...

PT-2018-13975

Name of the Vulnerable Software and Affected Versions Hutool versions prior to 4.1.12 Description The issue allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive, specifically through the unzip function in ZipUtil.java...