CVE-2018-12036
1 advisory.
Maven/org.owasp:dependency-check-maven CVE-2018-12036: high 7.8
Path Traversal in OWASP Dependency-Check
Action: Upgrade org.owasp:dependency-check-maven to 3.2.0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.0 | - |
Fixed versions
| 3.2.0 |
Sources
- osv: GHSA-hcwx-7q5v-vc67
- https://nvd.nist.gov/vuln/detail/CVE-2018-12036
- https://github.com/jeremylong/DependencyCheck
- https://github.com/jeremylong/DependencyCheck/blob/master/RELEASE_NOTES.md#version-320-2018-05-21
- https://github.com/snyk/zip-slip-vulnerability
CVE-2018-12036 · published · modified · JSON