Maven/com.alibaba.oneagent:one-java-agent-plugin CVE-2022-25842: medium 6.9, EPSS 3.91%

Path Traversal in com.alibaba.oneagent:one-java-agent-plugin

Action: Upgrade com.alibaba.oneagent:one-java-agent-plugin to 0.0.2 or later.

Affected

Fixed versions

Sources

• osv: GHSA-9hr3-j9mc-xmq2
• https://nvd.nist.gov/vuln/detail/CVE-2022-25842
• https://github.com/alibaba/one-java-agent/pull/29
• https://github.com/alibaba/one-java-agent/pull/29/commits/359603b63fc6c59d8b57e061c171954bab3433bf
• https://github.com/alibaba/one-java-agent/pull/29/commits/b5b437f9f4c8cbfe7bdbe266e975a4bd513c13fe
• https://github.com/alibaba/one-java-agent
• https://github.com/alibaba/one-java-agent/blob/1f399a2299a8a409d15ea6111a7098629b8f1050/one-java-agent-plugin/src/main/java/com/alibaba/oneagent/utils/IOUtils.java
• https://snyk.io/vuln/SNYK-JAVA-COMALIBABAONEAGENT-2407874

CVE-2022-25842 · published 2022-05-03T00:00:44Z · modified 2026-07-08T06:49:35.350210393Z · JSON