GitHub Advisoryadvisory · Maven

GHSA-9hr3-j9mc-xmq2 Path Traversal in com.alibaba.oneagent:one-java-agent-plugin

MEDIUM Published 2022-05-03 Modified 2022-05-20 Official page ↗
Aliases
CVE-2022-25842
Ecosystem
Maven
Packages
com.alibaba.oneagent:one-java-agent-plugin
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:L
Weaknesses
CWE-22, CWE-29
Reviewed
2022-05-20

Affected packages

• Maven com.alibaba.oneagent:one-java-agent-plugin: < 0.0.2 → fixed in 0.0.2

Description

All versions of package `com.alibaba.oneagent:one-java-agent-plugin` are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. `../../evil.exe`). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.

Related

Alias · CVE (1)

  • CVE-2022-25842 All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip)… vulnerability

Weakness · CWE (2)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
  • CWE-29 Path Traversal: '\..\filename' weakness

References