Description
All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.
Remediation
References
https://github.com/alibaba/one-java-agent/blob/1f399a2299a8a409d15ea6111a7098629b8f1050/one-java-agent-plugin/src/main/java/com/alibaba/oneagent/utils/IOUtils.java
https://github.com/alibaba/one-java-agent/pull/29
https://github.com/alibaba/one-java-agent/pull/29/commits/359603b63fc6c59d8b57e061c171954bab3433bf
https://snyk.io/vuln/SNYK-JAVA-COMALIBABAONEAGENT-2407874
Related Vulnerabilities
CVE-2023-3691 Vulnerability in maven package org.webjars.bowergithub.sentsin:layui
CVE-2023-49093 Vulnerability in maven package org.htmlunit:htmlunit
CVE-2017-3199 Vulnerability in maven package org.graniteds:granite-generator
CVE-2020-27216 Vulnerability in maven package org.mortbay.jetty:jetty
CVE-2021-21294 Vulnerability in maven package org.http4s:http4s-blaze-server_2.13