CVE-2022-25842

EIP tracks 1 public exploit for CVE-2022-25842. PoCs published by shoucheng3.

AI-analyzed exploit summary This repository contains a proof-of-concept exploit for CVE-2022-25842, targeting the Alibaba One Java Agent. The exploit demonstrates how to leverage the vulnerability to execute arbitrary code via plugin activation.

All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially crafted archive that holds directory traversal filenames (e.g. ../../evil.exe). The attacker can overwrite executable files and either invoke them remotely or wait for the system or user to call them, thus achieving remote command execution on the victim’s machine.