iris-sast/zip4j

PoC

CWE-Bench-Java CVE-2018-1002202 versions 1.3.2, 1.3.3

view exploit source poc_in_githubauthor iris-sastpublished 2025-06-30catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-1002202US	medium6.5	12.6% (96th)	Exploit	2018-07-25
zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during e…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.