Vulnerability Database
Blog
FAQ
Docs
CVE-2018-20227
See a problem?
Please try reporting it
to the source
first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2018-20227
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-20227.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2018-20227
Aliases
GHSA-x3cr-x949-h5jv
Published
2018-12-19T11:29:01Z
Modified
2024-08-16T23:29:08Z
Severity
7.5 (High)
CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS Calculator
Summary
[none]
Details
RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.
References
https://github.com/eclipse/rdf4j/issues/1210
https://github.com/eclipse/rdf4j/pull/1211/commits/df15a4d7a8f2789c043b27c9eafe1b30316cfa79
Affected packages
Git
/
github.com/eclipse/rdf4j
Affected ranges
Type
GIT
Repo
https://github.com/eclipse/rdf4j
Events
Introduced
0
Unknown introduced commit / All previous commits are affected
Fixed
6a96f444f59457b6bf77dc5ce5d7ae7e2bbd274f
CVE-2018-20227 - OSV