Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache UIMA

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2022-32287 Public exploit

    Apache UIMA prior to 3.3.1 has a path traversal vulnerability when extracting (PEAR) archives

    A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA…

    Apache Software Foundation Apache UIMA uimaj org.apache.uima:uimaj-core Ubuntu Maven