Description
core/api/datasets/internal/actions/Explode.java in the Dataset API in DKPro Core through 1.10.0 allows Directory Traversal, resulting in the overwrite of local files with the contents of an archive.
Remediation
References
https://github.com/dkpro/dkpro-core/issues/1325
Related Vulnerabilities
CVE-2021-23597 Vulnerability in npm package fastify-multipart
CVE-2022-23945 Vulnerability in maven package org.apache.shenyu:shenyu-common
CVE-2022-3952 Vulnerability in maven package com.manydesigns:portofino-microservice-launcher
CVE-2018-10936 Vulnerability in maven package org.postgresql:postgresql
CVE-2023-29214 Vulnerability in maven package org.xwiki.platform:xwiki-platform-panels-ui