zeroturnaround__zt-zip_CVE-2018-1002201_1-12

ZIP - convenience methods Continuous Integration Quick Overview The project was started and coded by Rein Raudjärv when he needed to process a large set of large ZIP archives for LiveRebel internals. Soon after we started using the utility in other projects because of the ease of use and it just...

K64709522: Multiple Zip Slip vulnerabilities

Security Advisory Description CVE-2018-1002200 plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

Improper Limitation of a Pathname to a Restricted Directory in zt-zip

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

GHSA-QCF3-9VMH-XW4R Improper Limitation of a Pathname to a Restricted Directory in zt-zip

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

cc.kebei:onion-expands-compress (>=3.0.0, <=3.0.6), co.riiid.gradle:co.riiid.gradle.gradle.plugin (>=0.3.1, <=0.4.2) +167 more potentially affected by CVE-2018-1002201 via org.zeroturnaround:zt-zip (>=1.5, <=1.12)

org.zeroturnaround:zt-zip MAVEN version =1.5, =3.0.0, =0.3.1, =1.1.1, =1.0, =2.0, =0.1.0, =5.0, =6.23 - com.github.humblerookie.gradle:com.github.humblerookie.gradle.gradle.plugin 0.4.4 - com.github.humblerookie:gradle-github-plugin 0.4.4 - com.github.jherculesqz:core-fw 1.0 -...

cc.kebei:onion-expands-compress (>=3.0.0, <=3.0.6), co.riiid.gradle:co.riiid.gradle.gradle.plugin (>=0.3.1, <=0.4.2) +167 more potentially affected by CVE-2018-1002201 via org.zeroturnaround:zt-zip (>=1.5, <=1.12)

org.zeroturnaround:zt-zip MAVEN version =1.5, =3.0.0, =0.3.1, =1.1.1, =1.0, =2.0, =0.1.0, =5.0, =6.23 - com.github.humblerookie.gradle:com.github.humblerookie.gradle.gradle.plugin 0.4.4 - com.github.humblerookie:gradle-github-plugin 0.4.4 - com.github.jherculesqz:core-fw 1.0 -...

zt-zip directory traversal vulnerability

zt-zip is a library for compression/decompression. A directory traversal vulnerability exists in zt-zip versions prior to 1.13. An attacker can exploit this vulnerability by writing arbitrary files with a specially crafted zip archive file with a directory traversal name...

Directory traversal

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

cc.kebei:onion-expands-compress (>=3.0.0, <=3.0.6), co.riiid.gradle:co.riiid.gradle.gradle.plugin (>=0.3.1, <=0.4.2) +167 more potentially affected by CVE-2018-1002201 via org.zeroturnaround:zt-zip (>=1.5, <=1.12)

org.zeroturnaround:zt-zip MAVEN version =1.5, =3.0.0, =0.3.1, =1.1.1, =1.0, =2.0, =0.1.0, =5.0, =6.23 - com.github.humblerookie.gradle:com.github.humblerookie.gradle.gradle.plugin 0.4.4 - com.github.humblerookie:gradle-github-plugin 0.4.4 - com.github.jherculesqz:core-fw 1.0 -...

CVE-2018-1002201

CVE-2018-1002201 affects the zt-zip library prior to 1.13. The flaw is a directory traversal in a Zip archive entry that, when mishandled during extraction, allows writing to arbitrary files. This is the classic Zip-Slip issue. Public sources in the connected documents confirm the affected compon...

CVE-2018-1002201: Improper Limitation of a Pathname to a Restricted Directory

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

PT-2018-9623

Name of the Vulnerable Software and Affected Versions: zt-zip versions prior to 1.13 Description: The issue allows attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This is also known as 'Zip-Slip'. Recommendations: For...

CVE-2018-1002201

zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ dot dot slash in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'...

Arbitrary File Write

zt-zip is vulnerable to arbitrary file write. The application does not properly validate the destination filepath during compressed file extraction, allowing a malicious user to overwrite files in the target directory...

cc.kebei:onion-expands-compress (>=3.0.0, <=3.0.6), co.riiid.gradle:co.riiid.gradle.gradle.plugin (>=0.3.1, <=0.4.2) +167 more potentially affected by CVE-2018-1002201 via org.zeroturnaround:zt-zip (>=1.5, <=1.12)

org.zeroturnaround:zt-zip MAVEN version =1.5, =3.0.0, =0.3.1, =1.1.1, =1.0, =2.0, =0.1.0, =5.0, =6.23 - com.github.humblerookie.gradle:com.github.humblerookie.gradle.gradle.plugin 0.4.4 - com.github.humblerookie:gradle-github-plugin 0.4.4 - com.github.jherculesqz:core-fw 1.0 -...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview org.zeroturnaround:zt-zip is a library that helps to create, modify or extract ZIP archives. Affected versions of the package are vulnerable to Arbitrary File Write via Archive Extraction AKA "Zip Slip". It is exploited using a specially crafted zip archive, that holds path traversal...