Directory Traversal Vulnerability in plexus-archiver: Zip-Slip Risk
Summary
CVE-2018-1002200: plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. Affects plexus-archiver across 2 version ranges.
< 3.6.0-1
< f8f4233508193b70df33759ae9dc6154d69c2ea8
Fixed in 3.6.0-1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
plexus-archiver is a Java library used for creating and extracting archive files. It is part of the Plexus project, which provides a set of tools for building software. The library is designed to handle various archive formats, making it a versatile tool for developers. However, prior to version 3.6.0, plexus-archiver is susceptible to a directory traversal vulnerability, commonly referred to as 'Zip-Slip'. This vulnerability can allow attackers to manipulate archive entries to write files outside of the intended directory structure.
Vulnerability Detail
The vulnerability arises from improper handling of file paths during the extraction process of archive files. Specifically, the use of '..' (dot dot) sequences in file paths can lead to directory traversal, enabling attackers to write to arbitrary locations on the filesystem. This can result in unauthorized file creation or modification, potentially compromising the integrity and security of the system. The vulnerability is particularly concerning as it can be exploited through seemingly benign archive files, making it a stealthy attack vector.
How To Fix
Minimum fixed version
3.6.0-1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade plexus-archiverTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If an immediate update is not feasible, consider implementing input validation to sanitize file paths before extraction. This can help mitigate the risk of directory traversal attacks. Additionally, avoid extracting archives from untrusted sources.
Conclusion
The directory traversal vulnerability in plexus-archiver poses a significant risk to systems using this library. It is crucial for users to update to the latest version to protect against potential exploitation. Implementing additional security measures, such as input validation, can further enhance protection.
See every vulnerability recorded for plexus-archiver →
FAQ
The CVSS score for this vulnerability is 5.5, indicating a moderate level of severity.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without any signup.
Exploitation of this vulnerability can lead to unauthorized file access, modification, or creation, potentially compromising system security.
Yes, implementing input validation to sanitize file paths can help mitigate the risk of directory traversal attacks.
Versions of plexus-archiver prior to 3.6.0 are affected by this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for plexus-archiver.
