Lucene search
GoogleOSV:GHSA-W9MP-P2WP-2XF7HistoryFeb 10, 2022 - 8:35 p.m.
Improper file downloads in Apache Tapestry
2022-02-1020:35:42
Google
osv.dev
7
0.001 Low
EPSS
Percentile
45.7%
In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run.
Related
nvd
nvd
CVE-2020-13953
2020-09-30 18:15:21
CVE-2021-30638
2021-04-27 19:15:07
prion
prion
Code injection
2020-09-30 18:15:00
Information disclosure
2021-04-27 19:15:00
osv
osv
CVE-2020-13953
2020-09-30 18:15:21
Information Exposure in Apache Tapestry
2022-03-18 17:53:58
CVE-2021-30638
2021-04-27 19:15:07
cve
cve
CVE-2020-13953
2020-09-30 18:15:21
CVE-2021-30638
2021-04-27 19:15:07
veracode
veracode
Information Disclosure
2020-10-01 06:38:32
Information Disclosure
2021-04-28 06:39:37
github
github
Improper file downloads in Apache Tapestry
2022-02-10 20:35:42
Information Exposure in Apache Tapestry
2022-03-18 17:53:58
checkpoint_advisories
checkpoint_advisories
Apache Tapestry Information Disclosure (CVE-2020-13953)
2020-12-22 00:00:00
cvelist
cvelist
CVE-2020-13953
2020-09-30 16:51:59
openvas
openvas