Skip to content
OpenAdvisories

Archive

1 May 2022

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 6.9
    CVE-2022-25842 Public exploit

    Arbitrary File Write via Archive Extraction (Zip Slip)

    All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can over…