org.springframework.integration:spring-integration-zip

3 results · Feed

• Medium 5.3
  CVE-2021-22114

  Path Traversal in Spring-integration-zip

  Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z),…

  org.springframework.integration:spring-integration-zip Maven
  Mar 1, 2021
• Medium 4.7
  CVE-2018-1263 Public exploit

  spring-integration-zip Arbitrary File Write

  Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cp…

  Pivotal Spring Integration Zip org.springframework.integration:spring-integration-zip Maven
  May 15, 2018
• Medium 4.7
  CVE-2018-1261

  Path traversal in org.springframework.integration:spring-integration-zip

  Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So w…

  Pivotal Spring Integration Zip org.springframework.integration:spring-integration-zip Maven
  May 11, 2018