Executive brief
pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names
Affected products
- Maven org.pf4j:pf4j
Junglewise Threat Intelligence
CVE-2025-70952: pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names
CVE-2025-70952 · Severity: medium · CVSS 4 · Published 2026-03-25
Technologies: org.pf4j:pf4j (Maven). Vendors: Maven.