Skip to content

Product

org.springframework.integration/spring-integration-zip vulnerabilities

3 published CVES affecting org.springframework.integration/spring-integration-zip, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest org.springframework.integration/spring-integration-zip CVEs

Newest publication first

  1. CVE-2021-22114 Path Traversal in Spring-integration-zip

    Published
    MediumCVSS 5.3 EPSS 1.0%

    Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds path trav...

  2. CVE-2018-1263 spring-integration-zip Arbitrary File Write

    Published
    MediumCVSS 4.7

    Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z), that holds p...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.