https://bugzilla.redhat.com/show_bug.cgi?id=1764640
--- Doc Text *updated* by Mauro Matteo Cascella <mcascell(a)redhat.com> ---
A resource consumption vulnerability was discovered in apache-commons-compress in the way
NioZipEncoding encodes filenames. Applications that use Compress to create archives, with
one of the filenames within the archive being controlled by the user, may be vulnerable to
this flaw. A remote attacker could exploit this flaw to cause an infinite loop during the
archive creation, thus leading to a denial of service.
--
You are receiving this mail because:
You are on the CC list for the bug.