Skip to content
OpenAdvisories

Archive

21 September 2018

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2018-17297 Public exploit

    Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal

    The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.