Maven/cn.hutool:hutool-all CVE-2018-17297: high 7.5, EPSS 2.67%
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
Action: Upgrade cn.hutool:hutool-all to 4.1.12 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.12 | - |
Fixed versions
| 4.1.12 |
Sources
- osv: GHSA-rhq2-2574-78mc#Maven/cn.hutool:hutool-all
- https://nvd.nist.gov/vuln/detail/CVE-2018-17297
- https://github.com/looly/hutool/issues/162
- https://github.com/advisories/GHSA-rhq2-2574-78mc
- https://github.com/looly/hutool
CVE-2018-17297 · published · modified · JSON