CVE-2018-17297

NONE EPSS 84.0%

Published Sep 21, 20187y ago · Modified Jun 17, 20262w ago

Published Sep 21, 2018 7y ago

Last Modified Jun 17, 2026 2w ago

Description

The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.

Threat Intelligence

EPSS Exploit Probability

84.0% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-22 Path Traversal Resource Mgmt

Affected Products 1

Vendor	Product	Version	Range
hutool	hutool	*	<4.1.12

References 1

github.com https://github.com/looly/hutool/issues/162

Third Party Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.