CVE-2018-1263 spring-integration-zip Arbitrary File Write
MediumCVSS 4.7
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| org.springframework.integration/spring-integration-zip(Maven) | < 1.0.2 | 1.0.2 |
| org.springframework.integration/spring-integration-zip(Maven) | = 1.0.0.RELEASE | No fix listed |
| org.springframework.integration/spring-integration-zip(Maven) | = 1.0.1.RELEASE | No fix listed |
| VMware spring integration zip | < 1.0.2 | 1.0.2 |
| pivotal Spring Integration Zip | = versions prior to 1.0.2 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com product
- pivotal.io vendor-advisory
- web.archive.org
- github.com
- 104179 third-party-advisory vdb-entry