title: Apache Atlas: zip path traversal in import functionality
description: A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem.  This issue affects Apache Atlas versions from 0.8.4 to 2.2.0.
problem types: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
affected:
{
defaultStatus: unaffected
product: Apache Atlas
vendor: Apache Software Foundation
versions:
lessThan: 2.3.0, status: affected, version: 0.8.4, versionType: maven
}
metrics:
other: [
content: {'text': 'moderate'}
type: Textual description of severity
]