Hutool < 4.1.12 - Path Traversal and Arbitrary File Write via ZipUtil Unzip Function
The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.