Path Traversal in OWASP Dependency-Check

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

Vulnerability ID: GHSA-hcwx-7q5v-vc67
Aliases: CVE-2018-12036
Published: 2022-05-14 03:12:09
CWE: CWE-22
Severity rating: HIGH
CVSS: type: CVSS_V3
score: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected packages:
package: ecosystem: Maven
name: org.owasp:dependency-check-maven