---

CVE-2019-10185 - log back

CVE-2019-10185 created at 25 Sep 2019 19:31:40
Severity	+ High
Remote	+ Remote
Type	+ Directory traversal
Description	+ It was found that icedtea-web was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break out of the sandbox.
References	+ https://marc.info/?l=oss-security&m=156458681628488
Notes