Arbitrary File Write

2018-06-0802:42:30

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

29.6%

JSON

dependency-check-core is vulnerable to arbitrary file write. The vulnerability exists due to the improper checking on the extracted file path, allowing arbitrary file writes.

CPENameOperatorVersion
dependency-check coreeq3.1.2
dependency-check corele3.1.1

CPE	Name	Operator	Version
	dependency-check core	eq	3.1.2
	dependency-check core	le	3.1.1

References

github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md#version-320-2018-05-21

github.com/jeremylong/DependencyCheck/commit/4df51f39043c80b98aefdb2ae592f052d3c26acc

0.001 Low

EPSS

Percentile

29.6%

JSON

Related for VERACODE:6718