Colm O hEigeartaigh created ARIES-1934: ------------------------------------------
Summary: Make sure jar/zip files are jailed to the destination directory Key: ARIES-1934 URL: https://issues.apache.org/jira/browse/ARIES-1934 Project: Aries Issue Type: Improvement Reporter: Colm O hEigeartaigh There are a number of locations in Aries where we unzip a jar or zip file to the filesystem, without checking that the all of the files are jailed to the intended destination directory. This is a potential security issue as it allows an attacked to overwrite files on the system outside of the intended directory. -- This message was sent by Atlassian Jira (v8.3.4#803005)