Junglewise Threat Intelligence

CVE-2023-24057: MITM based Zip Slip in `org.hl7.fhir.publisher:org.hl7.fhir.publisher`

CVE-2023-24057 · Severity: low · CVSS 3.1 · Published 2023-01-23

Technologies: ca.uhn.hapi.fhir:org.hl7.fhir.utilities (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.r5 (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.convertors (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.r4b (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.validation (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.core (Maven). Vendors: Maven.

Executive brief

MITM based Zip Slip in `org.hl7.fhir.publisher:org.hl7.fhir.publisher`

Affected products

  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.utilities
  • Maven org.hl7.fhir.publisher:org.hl7.fhir.publisher
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.r5
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.convertors
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.r4b
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.validation
  • Maven ca.uhn.hapi.fhir:org.hl7.fhir.core

Related threats