https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 16:59:20 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-09634 cnvd-2018-09634 https://cve.radiocsirt.org/vuln/cnvd-2018-09634 https://cve.radiocsirt.org/vuln/euvd-2026-164366 EUVD-2026-164366 https://cve.radiocsirt.org/vuln/euvd-2026-164366 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1263 <p>Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> <p>Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1263 https://cve.radiocsirt.org/vuln/ghsa-87vg-5pgx-pggh <p><strong>Affected:</strong> Maven: org.springframework.integration:spring-integration-zip</p> <p>Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> <p><strong>Affected:</strong> Maven: org.springframework.integration:spring-integration-zip</p> <p>Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.</p> https://cve.radiocsirt.org/vuln/ghsa-87vg-5pgx-pggh https://cve.radiocsirt.org/vuln/gsd-2018-1263 gsd-2018-1263 https://cve.radiocsirt.org/vuln/gsd-2018-1263