CVE-2018-17297

The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename…

published September 21, 2018

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02674 · 85.7th percentile
Published
2018-09-21T06:00Z
EPSS history
Timeline
  • 21 SEP 06:00Z
    The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename…
    cvelistv5