PT-2026-32035 · Red Hat · Quarkus-Openapi-Generator
CVSS v4.0
8.7
High
| Vector | AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N |
Name of the Vulnerable Software and Affected Versions
Quarkus OpenAPI Generator versions prior to 2.16.0 and 2.15.0-lts
Description
The
unzip() method in ApicurioCodegenWrapper.java does not validate that the file path of extracted ZIP entries remains within the intended output directory. The destination file path is constructed using new File(toOutputDir, entry.getName()) without proper validation. A malicious ZIP archive containing path traversal sequences (e.g., ../../malicious.java) could allow writing files outside the target directory. This could lead to overwriting source files, injecting malicious code, or modifying configuration files, potentially resulting in a supply chain compromise.Recommendations
Update to version 2.16.0 or 2.15.0-lts.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Quarkus-Openapi-Generator