GHSA-hcwx-7q5v-vc67

ghsaUSosv

Path Traversal in OWASP Dependency-Check

view advisory published 2022-05-14Licence: CC-BY-4.0

OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-12036US	high7.8	1.68% (77th)	Exploit	2018-06-07
OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.