CVE-2020-7647

2020-05-1119:30:18

snyk

www.cve.org

5.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

61.0%

JSON

All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.

CNA Affected

[
  {
    "product": "io.jooby:jooby and org.jooby:jooby",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "all versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2"
      }
    ]
  }
]