EUVD-2024-21976

Malicious code in bioql PyPI...

CVE-2024-24569

The Pixee Java Code Security Toolkit is a set of security APIs meant to help secure Java code. "ZipSecurityisBelowCurrentDirectory" is vulnerable to a partial-path traversal bypass. To be vulnerable to the bypass, the application must use toolkit version =1.1.1, use ZipSecurity as a guard against...

CVE-2024-24569

Summary : CVE-2024-24569 concerns the Pixee Java Code Security Toolkit. The vulnerability lies in ZipSecurity#isBelowCurrentDirectory and affects toolkit versions ≤ 1.1.1. Technical details (from provided sources) : The partial-path traversal bypass can be triggered when an application uses the t...

CVE-2024-24569: Improper Limitation of a Pathname to a Restricted Directory

The Pixee Java Code Security Toolkit is a set of security APIs meant to help secure Java code. ZipSecurityisBelowCurrentDirectory is vulnerable to a partial-path traversal bypass. To be vulnerable to the bypass, the application must use toolkit version =1.1.1, use ZipSecurity as a guard against...

Java Code Security Toolkit Path Traversal Vulnerability

The Java Code Security Toolkit is a set of security APIs designed to help secure Java code. A path traversal vulnerability exists in Java Code Security Toolkit 1.1.1 and prior versions, which stems from ZipSecurityisBelowCurrentDirectory being susceptible to a partial path traversal vulnerability...