by Kastro
Paper/Archive/CVE-2022-25842

CVE-2022-25842

snyk — Arbitrary File Write via Archive Extraction (Zip Slip)

EPSS 4%CVSS 9.8
critical.is priorityof 100
48
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 90.3.903 × 2018.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.

Affected

ProductAffectedFixed inSource
com.alibaba.oneagent:one-java-agent-plugin< unspecifiedunspecifiedCNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
snyk (CNA)6.9CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:N/A:L/E:P

References

refsnyk.io/vuln/SNYK-JAVA-COMALIBABAONEAGENT-2407874refgithub.com/alibaba/one-java-agent/blob/1f399a2299a8a409d15ea6111a7098629b8f1050/one-java-agent-plugin/src/main/java/com/alibaba/oneagent/utils/IOUtils.javarefgithub.com/alibaba/one-java-agent/pull/29refgithub.com/alibaba/one-java-agent/pull/29/commits/359603b63fc6c59d8b57e061c171954bab3433bf