CVE-2023-22899

Published January 10th, 2023

View on NVD ↗

CVSS v3

5.9

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.

srikanth-lingala/zip4j

A Java library for zip files and streams

GitHub

2.22K