4 matches found
GHSA-2PJ2-GCHF-WMW7 Zip4j Origin Validation Error
Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3...
5.9CVSS7AI score0.00619EPSS
SaveExploits1References9
UBUNTU-CVE-2023-22899
Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive...
5.9CVSS6.6AI score0.00619EPSS
SaveExploits1References7
Zip4j 访问控制错误漏洞
Zip4j is a Java library for zip files and streams from the individual developer Srikanth Reddy Lingala. A security vulnerability exists in Zip4j that stems from the use of Zip4j that does not always check the MAC when decrypting ZIP archives...
5.9CVSS6.9AI score0.00619EPSS
SaveExploits1References9
20