Lucene search
+L

4 matches found

OSV
OSV
added 2023/01/10 3:30 a.m.25 views

GHSA-2PJ2-GCHF-WMW7 Zip4j Origin Validation Error

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. This issue has been fixed in version 2.11.3...

5.9CVSS7AI score0.00619EPSS
SaveExploits1References9
OSV
OSV
added 2023/01/10 2:15 a.m.12 views

UBUNTU-CVE-2023-22899

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive...

5.9CVSS6.6AI score0.00619EPSS
SaveExploits1References7
Vulnrichment
Vulnrichment
added 2023/01/10 12:00 a.m.11 views

CVE-2023-22899

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive...

6.7AI score0.00619EPSS
SaveExploits1References6
CNNVD
CNNVD
added 2023/01/10 12:00 a.m.16 views

Zip4j 访问控制错误漏洞

Zip4j is a Java library for zip files and streams from the individual developer Srikanth Reddy Lingala. A security vulnerability exists in Zip4j that stems from the use of Zip4j that does not always check the MAC when decrypting ZIP archives...

5.9CVSS6.9AI score0.00619EPSS
SaveExploits1References9
Rows per page
Query Builder