CVE-2018-20227

RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.

• CWE-22

• https://github.com/eclipse/rdf4j/issues/1210Exploit, Issue Tracking, Third Party Advisory
• https://github.com/eclipse/rdf4j/pull/1211/commits/df15a4d7a8f2789c043b27c9eafe1b30316cfa79Patch, Third Party Advisory
• https://github.com/eclipse/rdf4j/issues/1210Exploit, Issue Tracking, Third Party Advisory
• https://github.com/eclipse/rdf4j/pull/1211/commits/df15a4d7a8f2789c043b27c9eafe1b30316cfa79Patch, Third Party Advisory

Published

Dec 19, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-2022IBM QRadar SIEM 7.2 and 7.3 discloses sensitive information …5.3
• CVE-2018-20220An issue was discovered on Teracue ENC-400 devices with firm…
• CVE-2018-20221Secure/SAService.rem in Deltek Ajera Timesheets 9.10.16 and …
• CVE-2018-20222XXE issue in Airsonic before 10.1.2 during parse.
• CVE-2018-20225An issue was discovered in pip (all versions) because it ins…7.8
• CVE-2018-20226An organization administrator can add a super administrator …
• CVE-2018-20228Subsonic V6.1.5 allows internetRadioSettings.view streamUrl …
• CVE-2018-20229GitLab Community and Enterprise Edition before 11.3.14, 11.4…
• CVE-2018-20230An issue was discovered in PSPP 1.2.0. There is a heap-based…
• CVE-2018-20231Cross Site Request Forgery (CSRF) in the two-factor-authenti…
• CVE-2018-20232The labels widget gadget in Atlassian Jira before version 7.…
• CVE-2018-20233The Upload add-on resource in Atlassian Universal Plugin Man…