Executive brief
Apache Ivy does not verify target path when extracting the archive
Affected products
- Maven org.apache.ivy:ivy
Junglewise Threat Intelligence
CVE-2022-37865: Apache Ivy does not verify target path when extracting the archive
CVE-2022-37865 · Severity: low · CVSS 3.1 · Published 2022-11-07
Technologies: org.apache.ivy:ivy (Maven). Vendors: Maven.