GitHub Advisoryadvisory · Maven

GHSA-m9jm-rhrm-gcxj Path traversal in org.springframework.integration:spring-integration-zip

MEDIUM Published 2018-10-18 Modified 2024-04-12 Official page ↗
Aliases
CVE-2018-1261
Ecosystem
Maven
Packages
org.springframework.integration:spring-integration-zip
Severity
Moderate
CVSS vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-22
Reviewed
2020-06-16

Affected packages

• Maven org.springframework.integration:spring-integration-zip: < 1.0.1 → fixed in 1.0.1

Description

Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.

Related

Alias · CVE (1)

  • CVE-2018-1261 Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References