{"id":"CVE-2018-1002200","aliases":["DEBIAN-CVE-2018-1002200","DSA-4227-1","EUVD-2022-4128","GHSA-hcxq-x77q-3469","MGASA-2019-0005","RHSA-2018:1836","RHSA-2018:1837","SNYK-JAVA-ORGCODEHAUSPLEXUS-31680","UBUNTU-CVE-2018-1002200","USN-4832-1"],"status":"published","title":"Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","severity":{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.11579,"percentile":0.96065,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-22"],"published":"2018-06-12T00:00:00Z","modified":"2026-10-23T18:02:56Z","exploits":[{"source":"pocgithub","id":"shoucheng3/codehaus-plexus__plexus-archiver_CVE-2018-1002200_3-5","title":"shoucheng3/codehaus-plexus__plexus-archiver_CVE-2018-1002200_3-5","date":"2025-08-19","url":"https://github.com/shoucheng3/codehaus-plexus__plexus-archiver_CVE-2018-1002200_3-5"}],"fixes":[{"ecosystem":"Maven","package":"org.codehaus.plexus:plexus-archiver","fixed_in":["3.6.0"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"plexus-archiver","fixed_in":["3.6.0-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"plexus-archiver","fixed_in":["3.6.0-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"plexus-archiver","fixed_in":["3.6.0-1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"plexus-archiver","fixed_in":["1.2-1+deb8u1"],"sources":["osv"]},{"ecosystem":"Debian:9","package":"plexus-archiver","fixed_in":["2.2-1+deb9u1"],"sources":["osv"]},{"ecosystem":"Mageia:6","package":"plexus-archiver","fixed_in":["3.4-1.1.mga6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"plexus-archiver","fixed_in":["0:2.4.2-5.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"plexus-archiver-javadoc","fixed_in":["0:2.4.2-5.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"plexus-archiver","fixed_in":["0:2.4.2-5.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"plexus-archiver-javadoc","fixed_in":["0:2.4.2-5.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"plexus-archiver","fixed_in":["0:2.4.2-5.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"plexus-archiver-javadoc","fixed_in":["0:2.4.2-5.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"plexus-archiver","fixed_in":["0:2.4.2-5.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"plexus-archiver-javadoc","fixed_in":["0:2.4.2-5.el7_5"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-maven33-plexus-archiver","fixed_in":["0:2.4.2-5.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-maven33-plexus-archiver-javadoc","fixed_in":["0:2.4.2-5.1.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven35-plexus-archiver","fixed_in":["0:3.4-4.1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven35-plexus-archiver-javadoc","fixed_in":["0:3.4-4.1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven33-plexus-archiver","fixed_in":["0:2.4.2-5.1.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven33-plexus-archiver-javadoc","fixed_in":["0:2.4.2-5.1.el7"],"sources":["osv"]},{"ecosystem":"Ubuntu:16.04:LTS","package":"plexus-archiver","fixed_in":["2.2-1+deb9u1build0.16.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"plexus-archiver","fixed_in":["3.5-2ubuntu0.1~esm1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.codehaus.plexus:plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0-1"}]}]},{"source":"osv","ecosystem":"Debian:8","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.2-1+deb8u1"}]}],"versions":["1.2-1"]},{"source":"osv","ecosystem":"Debian:9","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-1+deb9u1"}]}],"versions":["2.2-1"]},{"source":"osv","ecosystem":"Maven","package":"org.codehaus.plexus:plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.0"}]}],"versions":["1.0","1.0-alpha-10","1.0-alpha-11","1.0-alpha-12","1.0-alpha-3","1.0-alpha-4","1.0-alpha-5","1.0-alpha-6","1.0-alpha-7","1.0-alpha-8","1.0-alpha-9","1.1","1.2","2.0","2.0.1","2.0.2","2.1","2.1.1","2.1.2","2.10","2.10-beta-1","2.10.1","2.10.2","2.10.3","2.11","2.2","2.3","2.4","2.4.1","2.4.3","2.4.4","2.5","2.6","2.6.1","2.6.2","2.6.3","2.6.4","2.7","2.7.1","2.8","2.8.1","2.8.2","2.8.3","2.8.4","2.9","2.9.1","3.0","3.0.1","3.0.2","3.0.3","3.1","3.1.1","3.2","3.3","3.4","3.4.1","3.5"]},{"source":"osv","ecosystem":"Mageia:6","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.4-1.1.mga6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"plexus-archiver-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"plexus-archiver-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"plexus-archiver-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"plexus-archiver-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.el7_5"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-maven33-plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el6","package":"rh-maven33-plexus-archiver-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.1.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven35-plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4-4.1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven35-plexus-archiver-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4-4.1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven33-plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.1.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_software_collections:3::el7","package":"rh-maven33-plexus-archiver-javadoc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.2-5.1.el7"}]}]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2-1+deb9u1build0.16.04.1"}]}],"versions":["2.2-1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5-2ubuntu0.1~esm1"}]}],"versions":["3.5-2"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"plexus-archiver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.5-2ubuntu0.1~esm1"}]}],"versions":["3.5-2"]}],"products":[{"vendor":"codehaus","product":"plexus-archiver"},{"vendor":"codehaus-plexus","product":"plexus-archiver"},{"vendor":"debian","product":"debian_linux"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"https://snyk.io/research/zip-slip-vulnerability","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web","article"]},{"url":"https://github.com/codehaus-plexus/plexus-archiver/commit/f8f4233508193b70df33759ae9dc6154d69c2ea8","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web"]},{"url":"https://www.debian.org/security/2018/dsa-4227","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/snyk/zip-slip-vulnerability","tags":["x_refsource_MISC","x_transferred","Exploit","Issue Tracking","Third Party Advisory","report","web"]},{"url":"https://snyk.io/vuln/SNYK-JAVA-ORGCODEHAUSPLEXUS-31680","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1837","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://github.com/codehaus-plexus/plexus-archiver/pull/87","tags":["x_refsource_CONFIRM","x_transferred","Exploit","Issue Tracking","Patch","Third Party Advisory","fix","web","report"]},{"url":"https://access.redhat.com/errata/RHSA-2018:1836","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-1002200","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-hcxq-x77q-3469"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-1002200","tags":["advisory"]},{"url":"https://github.com/codehaus-plexus/plexus-archiver","tags":["package"]},{"url":"https://advisories.mageia.org/MGASA-2019-0005.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=23174","tags":["report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/thread/I7XAAUCTHL2PDJHW5Q2IYATOAXX4AFFU/","tags":["web"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1584392","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1836.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-1002200","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-1002200","tags":["advisory","report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1837.json","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-1002200","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4832-1","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-1002200","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","status":"published","published":"2018-07-25T17:00:00Z","modified":"2024-08-05T12:47:57.447Z","cwes":["CWE-22"],"updated_at":"2026-11-02T14:35:09.139955Z"}],"euvd":[{"id":"EUVD-2022-4128","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","status":"published","published":"2018-07-25T17:00:00Z","modified":"2024-08-05T12:47:57Z","updated_at":"2026-11-03T02:39:25.8334Z"}],"ghsa":[{"id":"GHSA-hcxq-x77q-3469","title":"Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","status":"published","published":"2022-05-13T01:35:03Z","modified":"2023-01-27T05:02:16Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:36:17.742171Z"}],"nvd":[{"id":"CVE-2018-1002200","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","status":"published","published":"2018-07-25T17:29:00.237Z","modified":"2026-06-17T01:33:21.03Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:04:35.310988Z"}],"osv":[{"id":"CVE-2018-1002200","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","status":"published","published":"2018-07-25T17:29:00.237Z","modified":"2026-10-20T10:49:42.697875856Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:44:07.641418Z"},{"id":"DEBIAN-CVE-2018-1002200","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","status":"published","published":"2018-07-25T17:29:00.237Z","modified":"2026-10-23T18:02:56.256346892Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:45:29.988046Z"},{"id":"GHSA-hcxq-x77q-3469","title":"Improper Limitation of a Pathname to a Restricted Directory in plexus-archiver","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","status":"published","published":"2022-05-13T01:35:03Z","modified":"2026-09-10T03:49:33.757662645Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T15:46:48.920784Z"},{"id":"RHSA-2018:1836","title":"Red Hat Security Advisory: plexus-archiver security update","status":"published","published":"2024-09-13T16:51:46Z","modified":"2026-06-29T10:20:57Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"RHSA-2018:1837","title":"Red Hat Security Advisory: rh-maven33-plexus-archiver and rh-maven35-plexus-archiver security update","status":"published","published":"2024-09-13T16:51:51Z","modified":"2026-06-29T10:20:58Z","cvss":[{"version":"3.0","score":7.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:53:04.822845Z"},{"id":"UBUNTU-CVE-2018-1002200","description":"plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry that is mishandled during extraction. This vulnerability is also known as 'Zip-Slip'.","status":"published","published":"2018-07-25T17:29:00Z","modified":"2026-02-04T03:53:08.804571Z","cvss":[{"version":"3.0","score":5.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T15:54:16.544091Z"},{"id":"DSA-4227-1","title":"plexus-archiver - security update","status":"published","published":"2018-06-12T00:00:00Z","modified":"2026-03-09T02:10:09.985111Z","updated_at":"2026-11-02T15:46:16.862196Z"},{"id":"MGASA-2019-0005","title":"Updated plexus-archiver packages fix security vulnerability","description":"A path traversal vulnerability has been discovered in plexus-archiver\nwhen extracting a carefully crafted zip file which holds path traversal\nfile names. A remote attacker could use this vulnerability to write\nfiles outside the target directory and overwrite existing files with\nmalicious code or vulnerable configurations (CVE-2018-1002200).\n","status":"published","published":"2019-01-05T18:30:16Z","modified":"2026-04-16T06:24:06.865397568Z","updated_at":"2026-11-02T15:49:40.793816Z"},{"id":"USN-4832-1","title":"plexus-archiver vulnerability","description":"\nIt was discovered that Plexus Archiver incorrectly handled directory\ntraversal during extraction. An attacker could possibly use this for a\nZip-Slip attack.\n","status":"published","published":"2021-03-15T22:16:53Z","modified":"2026-02-10T04:42:06Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}