Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
added 2022/03/18 5:40 p.m.37 views

Path Traversal in Spring-integration-zip

Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal filenames. So...

5.3CVSS2.6AI score0.01038EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2021/03/01 6:15 p.m.41 views

CVE-2021-22114

Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal filenames. So...

5.3CVSS6.6AI score0.01038EPSS
SaveExploits0References1
Prion
Prion
added 2021/03/01 6:15 p.m.22 views

Path traversal

Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive affects other archives as well, bzip2, tar, xz, war, cpio, 7z, that holds path traversal filenames. So...

5CVSS4.7AI score0.01427EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder