Product · Pivotal

Spring Integration Zip

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

Medium 4.7

CVE-2018-1263 Public exploit

spring-integration-zip Arbitrary File Write

Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cp…

Pivotal Spring Integration Zip org.springframework.integration:spring-integration-zip Maven

May 15, 2018
Medium 4.7

CVE-2018-1261

Path traversal in org.springframework.integration:spring-integration-zip

Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So w…

Pivotal Spring Integration Zip org.springframework.integration:spring-integration-zip Maven

May 11, 2018