CVE-2022-25842
CVSS v3
9.8
CRITICAL
EPSS Score
2.7 %
exploit probability
CISA KEV
No
known exploited
Exploitation
—
SSVC status
Description
All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.
Technical details
- Published
- 2022-05-01
Frequently asked questions
What is CVE-2022-25842?
All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.
Is CVE-2022-25842 actively exploited?
Active exploitation of CVE-2022-25842 has not been confirmed. The EPSS score is 2.7%, indicating the estimated probability of exploitation in the next 30 days.
What is the CVSS score for CVE-2022-25842?
CVE-2022-25842 has a CVSS v3 base score of 9.8 (CRITICAL severity).
Is CVE-2022-25842 affecting your environment?
Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.
No credit card required · 500 free checks/month · Free API key
Other 2022 vulnerabilities worth triaging
Ranked by exploit probability (EPSS).