Path Traversal in DKPro Core

ALTO 7.5CVE-2019-11082 · GHSA-23gj-368h-92pq · Published 10/05/2019 · updated 17/06/2026

In breve

CVE-2019-11082 è una vulnerabilità ALTO (CVSS 7.5) che riguarda de.tudarmstadt.ukp.dkpro.core:de.tudarmstadt.ukp.dkpro.core.api.datasets-asl, dkpro-core (dkpro-core project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.9%, superiore al 79.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
de.tudarmstadt.ukp.dkpro.core:de.tudarmstadt.ukp.dkpro.core.api.datasets-asl Maven	`≤ 1.10.0`	No fix yet
dkpro-core dkpro-core_project	`≤ 1.10.0`	No fix yet

Description

core/api/datasets/internal/actions/Explode.java in the Dataset API in DKPro Core through 1.10.0 allows Directory Traversal, resulting in the overwrite of local files with the contents of an archive.

NVD description

core/api/datasets/internal/actions/Explode.java in the Dataset API in DKPro Core through 1.10.0 allows Directory Traversal, resulting in the overwrite of local files with the contents of an archive.

References

nvd.nist.gov/vuln/detail/CVE-2019-11082 · ADVISORY
dkpro/dkpro-core · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free