Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Arbitrary File Write

🗓️ 06 Jun 2018 05:41:04Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 24 Views

Apache Hadoop Common zip-slip vulnerability file traversa

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities have been identified in DB2 that affect the IBM Performance Management product
20 May 202014:01
–ibm
IBM Security Bulletins		Security Bulletin: IBM QRadar Incident Forensics is vulnerable to using component with known vulnerabilities
7 Oct 202020:58
–ibm
IBM Security Bulletins		Security Bulletin: IBM Db2® Warehouse has released a fix in response to multiple vulnerabilities found in IBM Db2®
19 Apr 202116:53
–ibm
IBM Security Bulletins		Security Bulletin: IBM InfoSphere Information Server is affected but not classified as vulnerable to multiple vulnerabilities in Apache Hadoop
17 May 202321:55
–ibm
IBM Security Bulletins		Security Bulletin: Multiple security vulnerabilities have been identified in IBM® DB2® shipped with IBM PureData System for Operational Analytics
29 Apr 202501:54
–ibm
IBM Security Bulletins		Security Bulletin: IBM Data Risk Manager is affected by multiple vulnerabilities including a remote code execution in Spring Framework (CVE-2022-22965)
11 Apr 202215:17
–ibm
IBM Security Bulletins		Security Bulletin: Due to use of Spark from Hadoop, IBM Cloud Pak for Multicloud Management Monitoring could allow a remote attacker to traverse directories on the system.
5 Sep 202310:36
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in dependent libraries affect IBM® Db2® leading to denial of service or privilege escalation.
10 Mar 202121:20
–ibm
Broadcom		BSA-2018-662
21 Jun 201800:00
–broadcom
CNVD		Apache Hadoop Arbitrary File Write Vulnerability
15 Nov 201800:00
–cnvd
Rows per page
Vulners
Node
apachehadoop-commonRange3.0.0-alpha1–3.1.0java
OR
apachehadoop-commonRange0.22.0–2.9.1java
OR
apachehive-commonRange2.0.0–3.0.0java
OR
apachehive-commonRange0.8.0–1.2.2java
OR
apachehadoop-common-instrumentedMatch0.22.0java
SourceLink
securityfocuswww.securityfocus.com/bid/105927
listswww.lists.apache.org/thread.html/rb21df54a4e39732ce653d2aa5672e36a792b59eb6717f2a06bb8d02a%40%3Ccommits.druid.apache.org%3E
listswww.lists.apache.org/thread.html/rb21df54a4e39732ce653d2aa5672e36a792b59eb6717f2a06bb8d02a@%3Ccommits.druid.apache.org%3E
listswww.lists.apache.org/thread.html/r4dddf1705dbedfa94392913b2dad1cd2d1d89040facd389eea0b3510@%3Ccommits.druid.apache.org%3E
listswww.lists.apache.org/thread.html/r4dddf1705dbedfa94392913b2dad1cd2d1d89040facd389eea0b3510%40%3Ccommits.druid.apache.org%3E
githubwww.github.com/apache/hadoop/commit/745f203e577bacb35b042206db94615141fa5e6f
listswww.lists.apache.org/thread.html/a1c227745ce30acbcf388c5b0cc8423e8bf495d619cd0fa973f7f38d@%3Cuser.hadoop.apache.org%3E
listswww.lists.apache.org/thread.html/a1c227745ce30acbcf388c5b0cc8423e8bf495d619cd0fa973f7f38d%40%3Cuser.hadoop.apache.org%3E
githubwww.github.com/apache/hive/commit/6e6b0cb7b1950e6b0e4a19b0f9e2d185031dd83f
hadoopwww.hadoop.apache.org/cve_list.html
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
08 Nov 2023 00:30Current
8.9High risk
Vulners AI Score8.9
CVSS 26.5
CVSS 38.8
EPSS0.04616
apache hadoop commonzip-slip vulnerabilityfile traversalmalicious zip archiveconcatenationdestination folder
24