ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2025-0851
9.8критическая

CVE-2025-0851

Описание

A path traversal issue in ZipUtils.unzip and TarUtils.untar in Deep Java Library (DJL) on all platforms allows a bad actor to write files to arbitrary locations.

CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://aws.amazon.com/security/security-bulletins/AWS-2025-003/https://github.com/deepjavalibrary/djl/releases/tag/v0.31.1https://github.com/deepjavalibrary/djl/security/advisories/GHSA-jcrp-x7w3-ffmg