Uploaded image for project: 'Arquillian'
  1. Arquillian
  2. ARQ-2228

zip slip vulnerability

    XMLWordPrintable

Details

    • Feature Request
    • Resolution: Unresolved
    • Major
    • None
    • 1.0.2.Final
    • Extension - Spacelift
    • None

    Description

      <dependency>
      <groupId>org.arquillian.spacelift</groupId>
      <artifactId>arquillian-spacelift</artifactId>
      <version>1.0.2</version>
      </dependency>

      A zip slip vulnerability exists in arquillian.spacelift.

      poc:
      File helloExtracted = Spacelift.task(new File("/hello.zip"), UnzipTool.class)
      .toDir("target/hellotgz")
      .execute()
      .await();
      File helloExtracted1 = Spacelift.task(new File("/hello.zip"), UntarTool.class)
      .toDir("target/hellotgz")
      .execute()
      .await();

      Attachments

        Activity

          People

            Unassigned Unassigned
            filexxe f y (Inactive)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: