CVE-2018-17297

Published September 21st, 2018

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.4

MEDIUM

Affected

PROJECT

Description

The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.

chinabugotech/hutool

🍬A set of tools that keep Java sweet.

GitHub

30.3K