SUSE CVE-2022-31159

The AWS SDK for Java enables Java developers to work with Amazon Web Services. A partial-path traversal issue exists within the downloadDirectory method in the AWS S3 TransferManager component of the AWS SDK for Java v1 prior to version 1.12.261. Applications using the SDK control the...

CVE-2022-31159

CVE-2022-31159 affects the AWS SDK for Java S3 TransferManager (v1) prior to 1.12.261. A validation flaw in downloadDirectory can let a caller include a UNIX .. sequence in an S3 object key, potentially allowing a remote attacker to download or write files outside the intended destination directo...

PT-2022-20574 · Amazon +1 · Aws Sdk For Java +1

Name of the Vulnerable Software and Affected Versions: AWS SDK for Java versions prior to 1.12.261 Description: A partial-path traversal issue exists within the downloadDirectory method in the AWS S3 TransferManager component of the AWS SDK for Java. This issue allows a knowledgeable actor to...