← All advisories

High severity7.5NVD Advisory· Published Dec 19, 2018· Updated Jun 17, 2026

CVE-2018-20227

CVE-2018-20227

Description

RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
org.eclipse.rdf4j:rdf4jMaven	< 2.5.0	2.5.0

Affected products

1

ghsa-coords
pkg:maven/org.eclipse.rdf4j/rdf4j
Range: < 2.5.0

Patches

Vulnerability mechanics

References

5

github.com/eclipse/rdf4j/pull/1211/commits/df15a4d7a8f2789c043b27c9eafe1b30316cfa79nvdPatchThird Party AdvisoryWEB
github.com/eclipse/rdf4j/issues/1210nvdExploitIssue TrackingThird Party AdvisoryWEB
github.com/advisories/GHSA-x3cr-x949-h5jvghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20227ghsaADVISORY
github.com/eclipse-rdf4j/rdf4j/commit/df15a4d7a8f2789c043b27c9eafe1b30316cfa79ghsaWEB

News mentions

0

No linked articles in our index yet.