
Demonstrates CVE-2022-21675 zip path traversal: a Python script builds a malicious archive with ../../../outside entries and a Java class reproduces ByteCode 2.10.16 extraction behavior.
Demo of CVE-2022-21675 in class
create-zip.py file to create a zip file with ../../../outside entity.
VulnerableExtract class and java file to exctract the file zip. They mimick the exact behaviour ByteCode 2.10.16 has