Lucene search
GoogleOSV:GHSA-8J39-FGFP-VXH8HistoryDec 19, 2018 - 7:25 p.m.
XXL-CONF Path Traversal vulnerability
2018-12-1919:25:04
Google
osv.dev
9
EPSS
0.004
Percentile
75.4%
An issue was discovered in XXL-CONF 1.6.0. There is a path traversal vulnerability via ../ in the keys parameter that can download any configuration file, related to ConfController.java and PropUtil.java.
Related
nvd
nvd
CVE-2018-20094
2018-12-12 10:29:00
veracode
veracode
Directory Traversal
2018-12-13 05:44:09
prion
prion
Path traversal
2018-12-12 10:29:00
osv
osv
CVE-2018-20094
2018-12-12 10:29:00
github
github
XXL-CONF Path Traversal vulnerability
2018-12-19 19:25:04
cvelist
cvelist
CVE-2018-20094
2018-12-12 08:00:00
cve
cve
CVE-2018-20094
2018-12-12 10:29:00