Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
pf4j before 20c2f80 has a path traversal vulnerability in the extract() function of Unzip.java, where improper handling of zip entry names can allow directory traversal or Zip Slip attacks, due to a lack of proper path normalization and validation.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Plexus-Utils 安全漏洞
Vulnerability Description
Plexus-utils是Plexus开源的一款通用实用程序。该程序主要用于简化字符串、文件、命令行、XML等的使用。 Plexus-Utils 20c2f80之前版本存在安全漏洞，该漏洞源于Unzip.java中extract函数存在路径遍历，可能导致目录遍历或Zip Slip攻击。
CVSS Information
N/A
Vulnerability Type
N/A