CVE-2023-22899 (published 2023-01-10T00:00:00)
Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a