CVE-2018-17297
3 advisories.
Maven/cn.hutool:hutool-parent CVE-2018-17297: high 7.5
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
Action: Upgrade cn.hutool:hutool-parent to 4.1.12 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.12 | - |
Fixed versions
| 4.1.12 |
Sources
- osv: GHSA-rhq2-2574-78mc
- https://nvd.nist.gov/vuln/detail/CVE-2018-17297
- https://github.com/looly/hutool/issues/162
- https://github.com/advisories/GHSA-rhq2-2574-78mc
- https://github.com/looly/hutool
CVE-2018-17297 · published · modified · JSON
Maven/cn.hutool:hutool-all CVE-2018-17297: high 7.5
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
Action: Upgrade cn.hutool:hutool-all to 4.1.12 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.12 | - |
Fixed versions
| 4.1.12 |
Sources
- osv: GHSA-rhq2-2574-78mc#Maven/cn.hutool:hutool-all
- https://nvd.nist.gov/vuln/detail/CVE-2018-17297
- https://github.com/looly/hutool/issues/162
- https://github.com/advisories/GHSA-rhq2-2574-78mc
- https://github.com/looly/hutool
CVE-2018-17297 · published · modified · JSON
Maven/cn.hutool:hutool-core CVE-2018-17297: high 7.5
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
Action: Upgrade cn.hutool:hutool-core to 4.1.12 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.1.12 | - |
Fixed versions
| 4.1.12 |
Sources
- osv: GHSA-rhq2-2574-78mc#Maven/cn.hutool:hutool-core
- https://nvd.nist.gov/vuln/detail/CVE-2018-17297
- https://github.com/looly/hutool/issues/162
- https://github.com/advisories/GHSA-rhq2-2574-78mc
- https://github.com/looly/hutool
CVE-2018-17297 · published · modified · JSON