GitHub Advisoryadvisory · Maven
GHSA-87vg-5pgx-pggh spring-integration-zip Arbitrary File Write
MEDIUM
Official page ↗
- Aliases
- CVE-2018-1263
- Ecosystem
- Maven
- Packages
- org.springframework.integration:spring-integration-zip
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
- Weaknesses
- CWE-22
- Reviewed
- 2023-07-19
Affected packages
• Maven org.springframework.integration:spring-integration-zip: < 1.0.2 → fixed in 1.0.2
Description
Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
Related
Alias · CVE (1)
- CVE-2018-1263 Addresses partial fix in CVE-2018-1261. vulnerability
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- https://nvd.nist.gov/vuln/detail/CVE-2018-1263 advisory
- https://github.com/spring-projects/spring-integration-extensions/commit/d10f537283d90eabd28af57ac97f860a3913bf9b web
- https://github.com/spring-projects/spring-integration package
- https://pivotal.io/security/cve-2018-1263 web
- https://web.archive.org/web/20210125210559/https://www.securityfocus.com/bid/104179 web