One-java-agent vulnerabilities

1 known vulnerability in One-java-agent from Alibabagroup. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  com.alibaba.oneagent:one-java-agent-plugin: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-25842May 1, 2022Com.alibaba.oneagent:one-java-agent-pluginEPSS 3.91%

  All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overw