https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 22:16:56 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-09600 cnvd-2018-09600 https://cve.radiocsirt.org/vuln/cnvd-2018-09600 https://cve.radiocsirt.org/vuln/euvd-2026-180654 EUVD-2026-180654 https://cve.radiocsirt.org/vuln/euvd-2026-180654 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1261 <p>Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> <p>Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1261 https://cve.radiocsirt.org/vuln/ghsa-m9jm-rhrm-gcxj <p><strong>Affected:</strong> Maven: org.springframework.integration:spring-integration-zip</p> <p>Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> <p><strong>Affected:</strong> Maven: org.springframework.integration:spring-integration-zip</p> <p>Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> https://cve.radiocsirt.org/vuln/ghsa-m9jm-rhrm-gcxj https://cve.radiocsirt.org/vuln/gsd-2018-1261 gsd-2018-1261 https://cve.radiocsirt.org/vuln/gsd-2018-1261