Vulnerabilities > Zip4J Project
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-01-10 | CVE-2023-22899 | Origin Validation Error vulnerability in Zip4J Project Zip4J Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive. | 5.9 |
| 2022-02-24 | CVE-2022-24615 | Improper Handling of Exceptional Conditions vulnerability in Zip4J Project Zip4J zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. | 4.3 |
| 2018-07-25 | CVE-2018-1002202 | Path Traversal vulnerability in Zip4J Project Zip4J zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. | 5.8 |