-
Bug
-
Resolution: Fixed
-
Low
-
None
-
3
-
Severity 2 - Major
-
1
-
Issue Summary
Discovery import zip files cannot be uploaded if any file within is larger than 1MB uncompressed.
Steps to Reproduce
- Create a Discovery import zip file, with at least one of the contained XML files inside being larger than 1MB.
- Create a new import, choose Discovery type, upload the zip file.
Expected Results
The file uploads successfully and can be imported.
Actual Results
The upload fails, with the following exception in the server logs:
java.io.IOException: Zip bomb detected! The file would exceed the max size of the expanded data in the zip-file. This may indicates that the file is used to inflate memory usage and thus could pose a security risk.
Workaround
Currently there is no known workaround for this behavior. A workaround will be added here when available
- relates to
-
JSDCLOUD-11162 Insight Discovery import of a large Scan Results zip does not work
-
- Closed
-
-
JSDCLOUD-10383 Schema import zips with schema files greater than 1MB fail to import
-
- Closed
-