Pivotal Spring Integration Zip
2 CVEs affecting Pivotal Spring Integration Zip. Latest disclosed: 2018-05-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-1263 | Medium | 4.7 | 2018-05-15 | Addresses partial fix in CVE-2018-1261. Pivotal spring-integration-zip, versions prior to 1.0.2, exposes an arbitrary file write vulnerability, that can be ach… |
CVE-2018-1261 | Medium | 4.7 | 2018-05-11 | Spring-integration-zip versions prior to 1.0.1 exposes an arbitrary file write vulnerability, which can be achieved using a specially crafted zip archive (affe… |