Karl Pauls created FELIX-5870: --------------------------------- Summary: Handle relative path elements in bundle classpath Key: FELIX-5870 URL: https://issues.apache.org/jira/browse/FELIX-5870 Project: Felix Issue Type: Bug Components: Framework Affects Versions: framework-5.6.10 Reporter: Karl Pauls Assignee: Karl Pauls Fix For: framework-6.0.0
We have to handle relative path elements in the bundle classpath to make sure we are not allowing entries to be unpacked outside of the bundle cache: https://res.cloudinary.com/snyk/image/upload/v1528192501/zip-slip-vulnerability/technical-whitepaper.pdf -- This message was sent by Atlassian JIRA (v7.6.3#76005)