CVE-2025-0851 | Amazon AWS DeepJavaLibrary up to 0.31.0 ZipUtils.unzip/TarUtils.untar absolute path traversal (AWS-2025-003)

A vulnerability was found in Amazon AWS DeepJavaLibrary up to 0.31.0. It has been classified as very critical. Affected is the function ZipUtils.unzip/TarUtils.untar. The manipulation leads to absolute path traversal.

This vulnerability is traded as CVE-2025-0851. It is possible to launch the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.