pf4j is vulnerable to Path Traversal or Zip Slip attack through improper handling of zip entry names

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2025-70952 · ADVISORY
• pf4j/pf4j · WEB
• pf4j/pf4j · WEB
• pf4j/pf4j commit 20c2f80 · WEB
• gist.github.com/weaver4VD/410f23adb24ef5f5077f021f4393e705 · WEB
• pf4j/pf4j · PACKAGE

org.pf4j:pf4j のその他の脆弱性

• CVE-2023-40828高 7.5An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the expandI…
• CVE-2023-40827高 7.5An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the loadplu…
• CVE-2023-40826高 7.5An issue in pf4j pf4j v.3.9.0 and before allows a remote attacker to obtain sensitive information and execute arbitrary code via the zipplug…