CVE-2021-22114

CVE-2021-22114 is an arbitrary file write vulnerability affecting vmware spring_integration_zip versions prior to 1.0.4. This flaw, a partial fix for CVE-2018-1263, allows an attacker to write files outside of the intended extraction directory by exploiting path traversal within specially crafted archive files (e.g., zip, tar, war). Rated as Medium severity (CVSS 5.3), this vulnerability can be exploited remotely without authentication or user interaction. While the impact is limited to low integrity (I:L), successful exploitation could lead to unauthorized file creation or modification on the affected system. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules like Metasploit or Nuclei. The CVE has minimal community discussion and media coverage, suggesting low public awareness and limited attacker interest at this time.