Description
RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.eclipse.rdf4j:rdf4j | < 2.5.0 | 2.5.0 | GHSA-x3cr-x949-h5jv |
High · 7.5
CVE-2018-20227
EUVD-2022-5697GHSA-x3cr-x949-h5jv
RDF4J vulnerable to zip slip
Published Dec 19, 2018 · Updated Aug 5, 2024 · Assigned by mitre