srikanth-lingala/zip4j · Security
Uncaught Exception in zip4j
- GHSA ID
- GHSA-q62h-jw38-24vh
- CVE ID
- CVE-2022-24615
- Severity
- medium
- Published
- Updated
- CVSS
- 5.5 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS v3
- 5.5 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
zip4j up to 2.9.1 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library.
CWEs
- CWE-248 · Uncaught Exception
- CWE-755 · Improper Handling of Exceptional Conditions