https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 16:08:45 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-12674 cnvd-2018-12674 https://cve.radiocsirt.org/vuln/cnvd-2018-12674 https://cve.radiocsirt.org/vuln/euvd-2026-164363 EUVD-2026-164363 https://cve.radiocsirt.org/vuln/euvd-2026-164363 https://cve.radiocsirt.org/vuln/fkie_cve-2018-8008 <p>Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> <p>Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-8008 https://cve.radiocsirt.org/vuln/ghsa-898j-5cc8-cmf5 <p><strong>Affected:</strong> Maven: org.apache.storm:storm-core</p> <p>Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> <p><strong>Affected:</strong> Maven: org.apache.storm:storm-core</p> <p>Apache Storm version 1.0.6 and earlier, 1.2.1 and earlier, and version 1.1.2 and earlier expose an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> https://cve.radiocsirt.org/vuln/ghsa-898j-5cc8-cmf5 https://cve.radiocsirt.org/vuln/gsd-2018-8008 gsd-2018-8008 https://cve.radiocsirt.org/vuln/gsd-2018-8008