https://bugzilla.redhat.com/show_bug.cgi?id=1764640
--- Comment #9 from Mauro Matteo Cascella mcascell@redhat.com --- Class ZipArchiveOutputStream creates an output stream for writing files in the ZIP file format. The flaw is triggered when calling the putArchiveEntry() method with a carefully crafted ArchiveEntry, whose name is then encoded by the aforementioned encoding algorithm used internally in Apache Commons Compress.