Vulnerability CVE-2020-36628


Published: 2022-12-25

Description:
A vulnerability classified as critical has been found in Calsign APDE. This affects the function handleExtract of the file APDE/src/main/java/com/calsignlabs/apde/build/dag/CopyBuildTask.java of the component ZIP File Handler. The manipulation leads to path traversal. Upgrading to version 0.5.2-pre2-alpha is able to address this issue. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-216747.

Type:

CWE-22

(Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'))

 References:
https://vuldb.com/?id.216747
https://github.com/Calsign/APDE/releases/tag/v0.5.2-pre2-alpha
https://github.com/Calsign/APDE/commit/c6d64cbe465348c1bfd211122d89e3117afadecf

Copyright 2026, cxsecurity.com

 

Back to Top