Goomph 路径遍历漏洞

Goomph is a DiffPlug open source plugin . Used to build OSGi packages , Eclipse plug-ins and RCP applications . A security vulnerability exists in Goomph versions prior to 3.37.2 that allows a malicious zip file to be written to an arbitrary location on the file system, overwriting certain...