CVE-2022-25842

All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.

• CWE-22

• https://github.com/alibaba/one-java-agent/blob/1f399a2299a8a409d15ea6111a7098629b8f1050/one-java-agent-plugin/src/main/java/com/alibaba/oneagent/utils/IOUtils.javaExploit, Third Party Advisory
• https://github.com/alibaba/one-java-agent/pull/29Patch, Third Party Advisory
• https://github.com/alibaba/one-java-agent/pull/29/commits/359603b63fc6c59d8b57e061c171954bab3433bfThird Party Advisory
• https://snyk.io/vuln/SNYK-JAVA-COMALIBABAONEAGENT-2407874Third Party Advisory
• https://github.com/alibaba/one-java-agent/blob/1f399a2299a8a409d15ea6111a7098629b8f1050/one-java-agent-plugin/src/main/java/com/alibaba/oneagent/utils/IOUtils.javaExploit, Third Party Advisory
• https://github.com/alibaba/one-java-agent/pull/29Patch, Third Party Advisory
• https://github.com/alibaba/one-java-agent/pull/29/commits/359603b63fc6c59d8b57e061c171954bab3433bfThird Party Advisory
• https://snyk.io/vuln/SNYK-JAVA-COMALIBABAONEAGENT-2407874Third Party Advisory

Published

May 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25836Bluetooth® Low Energy Pairing in Bluetooth Core Specificatio…7.5
• CVE-2022-25837Bluetooth® Pairing in Bluetooth Core Specification v1.0B thr…7.5
• CVE-2022-25838Laravel Fortify before 1.11.1 allows reuse within a short ti…8.1
• CVE-2022-25839The package url-js before 2.1.0 are vulnerable to Improper I…5.3
• CVE-2022-2584The dag-pb codec can panic when decoding invalid blocks.7.5
• CVE-2022-25841Uncontrolled search path elements in the Intel(R) Datacenter…7.8
• CVE-2022-25844The package angular after 1.7.0 are vulnerable to Regular Ex…7.5
• CVE-2022-25845The package com.alibaba:fastjson before 1.2.83 are vulnerabl…9.8
• CVE-2022-25847All versions of the package serve-lite are vulnerable to Cro…6.1
• CVE-2022-25848This affects all versions of package static-dev-server. This…7.5
• CVE-2022-25849The package joyqi/hyper-down from 0.0.0 are vulnerable to Cr…6.1
• CVE-2022-2585It was discovered that when exec'ing from a non-leader threa…7.8