spring-projects / spring-integration-extensions

The Spring Integration Extensions project provides extension components for Spring Integration
http://www.springintegration.org/
281 stars 266 forks source link

Disallow traversal entity in zip #190

Closed artembilan closed 6 years ago

artembilan commented 6 years ago

When the file name holds path traversal file names it gets concatenated to the target extraction directory, the final path ends up outside of the target folder.