VYPR

Spring Integration Zip

by VMware

Source repositories

CVEs (3)

  • CVE-2021-22114MedMar 1, 2021
    risk 0.35cvss 5.3epss 0.01

    Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path…

  • CVE-2018-1263MedMay 15, 2018
    risk 0.24cvss 4.7epss 0.01

    Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds…

  • CVE-2018-1261MedMay 11, 2018
    risk 0.24cvss 4.7epss 0.01

    Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename…