Closed artembilan closed 6 years ago
When the file name holds path traversal file names it gets concatenated to the target extraction directory, the final path ends up outside of the target folder.
Merged as https://github.com/spring-projects/spring-integration-extensions/commit/a5573eb232ff85199ff9bb28993df715d9a19a25
When the file name holds path traversal file names it gets concatenated to the target extraction directory, the final path ends up outside of the target folder.