medium5.5
CVE-2022-24615
Uncaught Exception in zip4j
Impact
zip4j up to 2.9.1 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | net.lingala.zip4j:zip4j | < 2.10.0 | 2.10.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Zip4j Project | Zip4j | before 2.10.0 |