← Back

Zip4j Project

zip4j_project

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Zip4j
zip4j
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-22899
1Zip4j Project
1Zip4j
Jun 17, 2026
Jan 10, 2023
N/A· v4
5.9 MEDIUM· v3
N/A· v2
Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.
CVE-2022-24615
1Zip4j Project
1Zip4j
Jun 17, 2026
Feb 24, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services th...Show more
zip4j up to v2.10.0 can throw various uncaught exceptions while parsing a specially crafted ZIP file, which could result in an application crash. This could be used to mount a denial of service attack against services that use zip4j library.Show less
CVE-2018-1002202
1Zip4j Project
1Zip4j
Nov 21, 2024
Jul 25, 2018
N/A· v4
6.5 MEDIUM· v3
5.8 MEDIUM· v2
zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also kn...Show more
zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.Show less