CVE-2018-12036: Path Traversal
Published Jun 7, 2018
·Updated
OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenames.
Affected Software
1 affected component
OWASP Dependency-Check<3.2.0
Event History
Jun 7, 2018
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is CVE-2018-12036?
CVE-2018-12036 is a vulnerability in OWASP Dependency-Check before version 3.2.0 that allows attackers to write to arbitrary files using a crafted archive with directory traversal filenames.
2
How can the OWASP Dependency-Check vulnerability be exploited?
The vulnerability can be exploited by using a crafted archive file with directory traversal filenames to write to arbitrary files.
3
What is the severity of CVE-2018-12036?
The severity of CVE-2018-12036 is high, with a severity value of 7.8.
4
How can I fix CVE-2018-12036 vulnerability in OWASP Dependency-Check?
To fix the vulnerability, upgrade to version 3.2.0 or later of OWASP Dependency-Check.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2018-12036?
The Common Weakness Enumeration (CWE) ID for CVE-2018-12036 is 123 and 22.