CVE-2023-5245 — FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory.

Loading…

CVE-2023-5245 — FileUtil.extract() enumerates all zip file entries and extracts each file without validating whether file paths in the archive are outside the intended directory. — CVE Database · The Intelligence Room