CVE-2022-25842
1 advisory.
Maven/com.alibaba.oneagent:one-java-agent-plugin CVE-2022-25842: medium 6.9
Path Traversal in com.alibaba.oneagent:one-java-agent-plugin
Action: Upgrade com.alibaba.oneagent:one-java-agent-plugin to 0.0.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.2 | - |
Fixed versions
| 0.0.2 |
Sources
- osv: GHSA-9hr3-j9mc-xmq2
- https://nvd.nist.gov/vuln/detail/CVE-2022-25842
- https://github.com/alibaba/one-java-agent/pull/29
- https://github.com/alibaba/one-java-agent/pull/29/commits/359603b63fc6c59d8b57e061c171954bab3433bf
- https://github.com/alibaba/one-java-agent/pull/29/commits/b5b437f9f4c8cbfe7bdbe266e975a4bd513c13fe
- https://github.com/alibaba/one-java-agent
- https://github.com/alibaba/one-java-agent/blob/1f399a2299a8a409d15ea6111a7098629b8f1050/one-java-agent-plugin/src/main/java/com/alibaba/oneagent/utils/IOUtils.java
- https://snyk.io/vuln/SNYK-JAVA-COMALIBABAONEAGENT-2407874
CVE-2022-25842 · published · modified · JSON