1 matches found
Directory Traversal
hutool-core is vulnerable to directory traversal. There is a lack of validation in the filenme when a ZIP archive is unzipped, which would allow remote attackers to overwrite arbitrary files using the ../ characters in a filename within the ZIP archive...
7.5CVSS7.4AI score0.02333EPSS
SaveExploits0References1Affected Software1
20