CVE-2018-1261

MediumCVSS 4.7/10Last modified Jun 17, 2026

Description

Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affects other archives as well, bzip2, tar, xz, war, cpio, 7z) that holds path traversal filenames. So when the filename gets concatenated to the target extraction directory, the final path ends up outside of the target folder.

Metrics

CVSS 3.1 4.7/10CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-22

Affected software

No affected versions have been published.

Timeline

Published
May 11, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-126105.3OX App Suite 7.8.4 and earlier allows Information Exposure.CVE-2018-126116.1OX App Suite 7.8.4 and earlier allows Directory Traversal.CVE-2018-126138.8An issue was discovered in phpMyAdmin 4.8.x before 4.8.2, in which an attacker can include (view and potentially execute) files on the serveCVE-2018-126155.3An issue was discovered in switchGroup() in agent/ExecHelper/ExecHelperMain.cpp in Phusion Passenger before 5.3.2. The set of groups (gidsetCVE-2018-126177.5qmp_guest_file_read in qga/commands-posix.c and qga/commands-win32.c in qemu-ga (aka QEMU Guest Agent) in QEMU 2.12.50 has an integer overflCVE-2018-12627.2Cloud Foundry Foundation UAA, versions 4.12.X and 4.13.X, introduced a feature which could allow privilege escalation across identity zones CVE-2018-126216.1An issue was discovered in Eventum 3.5.0. /htdocs/switch.php has an Open Redirect via the current_page parameter.CVE-2018-126226.1An issue was discovered in Eventum 3.5.0. htdocs/ajax/update.php has XSS via the field_name parameter.CVE-2018-126236.1An issue was discovered in Eventum 3.5.0. htdocs/switch.php has XSS via the current_page parameter.CVE-2018-126246.1An issue was discovered in Eventum 3.5.0. /htdocs/post_note.php has XSS via the garlic_prefix parameter.CVE-2018-126256.1An issue was discovered in Eventum 3.5.0. /htdocs/validate.php has XSS via the values parameter.CVE-2018-126266.1An issue was discovered in Eventum 3.5.0. /htdocs/popup.php has XSS via the cat parameter.
CVE-2018-1261: Medium severity, CVSS 4.7 | Vulnix