VDB

DEBIAN-CVE-2023-22899

DEBIAN-CVE-2023-22899 PUBLISHED CVSS 5.900000095367432 MEDIUM

Zip4j through 2.11.2, as used in Threema and other products, does not always check the MAC when decrypting a ZIP archive.

Risk Scores

CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected Products

VendorProductVersions
Debian:11zip4j2.9.0-1, 2.10.0-1, 2.11.1-1
Debian:12zip4j0, 0, 0
Debian:13zip4j0, 0, 0
Debian:14zip4j0, 0, 0

Timeline

  • Jan 10, 2023 CVE Published
  • Apr 28, 2026 CVE Updated

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›