zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: snyk

Published: 2018-07-25T17:00:00

Updated: 2024-08-05T12:47:57.478Z

Reserved: 2018-07-25T00:00:00

Link: CVE-2018-1002202

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-07-25T17:29:00.797

Modified: 2024-11-21T03:40:39.580

Link: CVE-2018-1002202

cve-icon Redhat

Severity : Important

Publid Date: 2018-06-05T00:00:00Z

Links: CVE-2018-1002202 - Bugzilla