Junglewise Threat Intelligence
CVE-2023-28465: HL7 FHIR Partial Path Zip Slip due to bypass of
CVE-2023-28465 · Severity: low · CVSS 3.1 · Published 2023-03-10
Technologies: ca.uhn.hapi.fhir:org.hl7.fhir.utilities (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.r5 (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.convertors (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.r4b (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.validation (Maven), ca.uhn.hapi.fhir:org.hl7.fhir.core (Maven). Vendors: Maven.
Executive brief
HL7 FHIR Partial Path Zip Slip due to bypass of CVE-2023-24057
Affected products
- Maven ca.uhn.hapi.fhir:org.hl7.fhir.utilities
- Maven ca.uhn.hapi.fhir:org.hl7.fhir.r5
- Maven ca.uhn.hapi.fhir:org.hl7.fhir.convertors
- Maven ca.uhn.hapi.fhir:org.hl7.fhir.r4b
- Maven ca.uhn.hapi.fhir:org.hl7.fhir.validation
- Maven ca.uhn.hapi.fhir:org.hl7.fhir.core