zeroturnaround__zt-zip_CVE-2018-1002201_1-12

ZIP - convenience methods Continuous Integration Quick Overview The project was started and coded by Rein Raudjärv when he needed to process a large set of large ZIP archives for LiveRebel internals. Soon after we started using the utility in other projects because of the ease of use and it just...

cc.kebei:onion-expands-compress (>=3.0.0, <=3.0.6), co.riiid.gradle:co.riiid.gradle.gradle.plugin (>=0.3.1, <=0.4.2) +167 more potentially affected by CVE-2018-1002201 via org.zeroturnaround:zt-zip (>=1.5, <=1.12)

org.zeroturnaround:zt-zip MAVEN version =1.5, =3.0.0, =0.3.1, =1.1.1, =1.0, =2.0, =0.1.0, =5.0, =6.23 - com.github.humblerookie.gradle:com.github.humblerookie.gradle.gradle.plugin 0.4.4 - com.github.humblerookie:gradle-github-plugin 0.4.4 - com.github.jherculesqz:core-fw 1.0 -...

cc.kebei:onion-expands-compress (>=3.0.0, <=3.0.6), co.riiid.gradle:co.riiid.gradle.gradle.plugin (>=0.3.1, <=0.4.2) +167 more potentially affected by CVE-2018-1002201 via org.zeroturnaround:zt-zip (>=1.5, <=1.12)

org.zeroturnaround:zt-zip MAVEN version =1.5, =3.0.0, =0.3.1, =1.1.1, =1.0, =2.0, =0.1.0, =5.0, =6.23 - com.github.humblerookie.gradle:com.github.humblerookie.gradle.gradle.plugin 0.4.4 - com.github.humblerookie:gradle-github-plugin 0.4.4 - com.github.jherculesqz:core-fw 1.0 -...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

cc.kebei:onion-expands-compress (>=3.0.0, <=3.0.6), co.riiid.gradle:co.riiid.gradle.gradle.plugin (>=0.3.1, <=0.4.2) +167 more potentially affected by CVE-2018-1002201 via org.zeroturnaround:zt-zip (>=1.5, <=1.12)

org.zeroturnaround:zt-zip MAVEN version =1.5, =3.0.0, =0.3.1, =1.1.1, =1.0, =2.0, =0.1.0, =5.0, =6.23 - com.github.humblerookie.gradle:com.github.humblerookie.gradle.gradle.plugin 0.4.4 - com.github.humblerookie:gradle-github-plugin 0.4.4 - com.github.jherculesqz:core-fw 1.0 -...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

ZIP Slip Arbitrary File Overwrite Remote Code Execution (CVE-2018-1002200; CVE-2018-1002201; CVE-2018-1002203; CVE-2018-1002204; CVE-2018-1002205; CVE-2018-1002206; CVE-2018-1002207; CVE-2018-1261; CVE-2018-8008; CVE-2018-8009; CVE-2021-43555)

A file overwrite vulnerability exist in archive formats. To trigger this issue, an attacker may create a malicious archive that will exploit this vulnerability. Successful exploitation of this vulnerability would allow a remote attacker to overwrite arbitrary files on the vulnerable system and...

cc.kebei:onion-expands-compress (>=3.0.0, <=3.0.6), co.riiid.gradle:co.riiid.gradle.gradle.plugin (>=0.3.1, <=0.4.2) +167 more potentially affected by CVE-2018-1002201 via org.zeroturnaround:zt-zip (>=1.5, <=1.12)

org.zeroturnaround:zt-zip MAVEN version =1.5, =3.0.0, =0.3.1, =1.1.1, =1.0, =2.0, =0.1.0, =5.0, =6.23 - com.github.humblerookie.gradle:com.github.humblerookie.gradle.gradle.plugin 0.4.4 - com.github.humblerookie:gradle-github-plugin 0.4.4 - com.github.jherculesqz:core-fw 1.0 -...