Arbitrary File Write

concourse-driver-java is vulnerable to arbitrary file write. The application does not properly validate the destination filepath when during zip file extraction, allowing a malicious user to control the write destination and overwrite files...