Dkpro · Dkpro Core · CVE-2019-11082
**Name of the Vulnerable Software and Affected Versions**
DKPro Core versions prior to 1.10.0
**Description**
The issue allows Directory Traversal, resulting in the overwrite of local files with the contents of an archive. This is due to a problem in the `core/api/datasets/internal/actions/Explode.java` file in the Dataset API.
**Recommendations**
For versions prior to 1.10.0, update to version 1.10.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the `Explode.java` file to minimize the risk of exploitation.