CVE-2022-25842
Arbitrary File Write via Archive Extraction (Zip Slip)
- State
- Published
- Severity
- 6.9 Medium
- Published
- May 1, 2022
- Updated
- Sep 17, 2024
- Reserved
- Feb 24, 2022
Description
All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.9 Medium | CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:L/E:P | snyk |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
com.alibaba.oneagent:one-java-agent-pluginn/a |
|
References
- https://snyk.io/vuln/SNYK-JAVA-COMALIBABAONEAGENT-2407874
- https://github.com/alibaba/one-java-agent/blob/1f399a2299a8a409d15ea6111a7098629b8f1050/one-java-agent-plugin/src/main/java/com/alibaba/oneagent/utils/IOUtils.java
- https://github.com/alibaba/one-java-agent/pull/29
- https://github.com/alibaba/one-java-agent/pull/29/commits/359603b63fc6c59d8b57e061c171954bab3433bf
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.