Threats tagged 'ghsa-f63g-88cj-hjf9'

IzPack installer versions prior to 5.2.7 contain a path traversal vulnerability in the UnpackerBase.unpack() method. This flaw allows an attacker to craft a malicious installer JAR with entries that include '../' sequences in target paths, enabling files to be written outside the intended installation directory. Because IzPack installer JARs are unsigned and lack integrity protection, attackers can easily repack legitimate installers with malicious payloads. Running such a trojanized installer can result in arbitrary file writes to attacker-chosen locations on the victim's system under the victim's privileges. This can include sensitive directories such as startup folders or system paths, especially on Windows where installers often run with local administrator rights. The vulnerability is confirmed unpatched in the latest source but fixed in version 5.2.7.