Executive brief
Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
Affected products
- Maven cn.hutool:hutool-all
- Maven cn.hutool:hutool-core
- Maven cn.hutool:hutool-parent
Junglewise Threat Intelligence
CVE-2018-17297: Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal
CVE-2018-17297 · Severity: low · CVSS 3 · Published 2018-10-17
Technologies: cn.hutool:hutool-all (Maven), cn.hutool:hutool-core (Maven). Vendors: Maven.