| Package | Affected versions | Patched versions |
|---|---|---|
| de.tudarmstadt.ukp.dkpro.core:de.tudarmstadt.ukp.dkpro.core.api.datasets-asl | ≤ 1.10.0 | |
| dkpro-core | ≤ 1.10.0 |
core/api/datasets/internal/actions/Explode.java in the Dataset API in DKPro Core through 1.10.0 allows Directory Traversal, resulting in the overwrite of local files with the contents of an archive.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free