CVE-2018-12036

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames

published June 7, 2018

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01683 · 76.8th percentile
Published
2018-06-07T18:00Z
EPSS history
Timeline
  • 07 JUN 18:00Z
    OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames
    cvelistv5