org.jooby:jooby-akka (1.0.3), org.jooby:jooby-assets (1.0.3) +74 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.0.3)

org.jooby:jooby MAVEN version 1.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.0.3 - org.jooby:jooby-assets 1.0.3 - org.jooby:jooby-assets-autoprefixer 1.0.3 -...

org.jooby:jooby-akka (1.1.0), org.jooby:jooby-assets (1.1.0) +79 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.1.0)

org.jooby:jooby MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.1.0 - org.jooby:jooby-assets 1.1.0 - org.jooby:jooby-assets-autoprefixer 1.1.0 -...

org.jooby:jooby-akka (1.2.1), org.jooby:jooby-apitool (1.2.1) +82 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.2.1)

org.jooby:jooby MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.2.1 - org.jooby:jooby-apitool 1.2.1 - org.jooby:jooby-assets 1.2.1 - org.jooby:jooby-assets-autoprefixer...

org.jooby:jooby-akka (1.2.2), org.jooby:jooby-apitool (1.2.2) +82 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.2.2)

org.jooby:jooby MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.2.2 - org.jooby:jooby-apitool 1.2.2 - org.jooby:jooby-assets 1.2.2 - org.jooby:jooby-assets-autoprefixer...

io.github.juspay.hyperswitchplugin:hyperswitch-killbill-plugin (0.1.0), org.jooby:jooby-akka (1.6.9) +103 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.6.9)

org.jooby:jooby MAVEN version 1.6.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - io.github.juspay.hyperswitchplugin:hyperswitch-killbill-plugin 0.1.0 - org.jooby:jooby-akka 1.6.9 - org.jooby:jooby-apitool 1.6.9...

org.jooby:jooby-akka (1.6.6), org.jooby:jooby-apitool (1.6.6) +84 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.6.6)

org.jooby:jooby MAVEN version 1.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.6.6 - org.jooby:jooby-apitool 1.6.6 - org.jooby:jooby-assets 1.6.6 - org.jooby:jooby-assets-autoprefixer...

org.jooby:jooby-akka (1.6.7), org.jooby:jooby-apitool (1.6.7) +84 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.6.7)

org.jooby:jooby MAVEN version 1.6.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.6.7 - org.jooby:jooby-apitool 1.6.7 - org.jooby:jooby-assets 1.6.7 - org.jooby:jooby-assets-autoprefixer...

org.jooby:jooby-akka (1.6.8), org.jooby:jooby-apitool (1.6.8) +93 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.6.8)

org.jooby:jooby MAVEN version 1.6.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.6.8 - org.jooby:jooby-apitool 1.6.8 - org.jooby:jooby-assets 1.6.8 - org.jooby:jooby-assets-autoprefixer...

org.jooby:jooby-akka (1.6.5), org.jooby:jooby-apitool (1.6.5) +84 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.6.5)

org.jooby:jooby MAVEN version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.6.5 - org.jooby:jooby-apitool 1.6.5 - org.jooby:jooby-assets 1.6.5 - org.jooby:jooby-assets-autoprefixer...

gradle.plugin.io.jooby:jooby-gradle-plugin (>=2.7.0, <=2.8.1), io.jooby.openapi:io.jooby.openapi.gradle.plugin (>=2.7.0, <=2.8.1) +33 more potentially affected by CVE-2020-7647 via io.jooby:jooby (>=2.0.0.m1, <=2.8.1)

io.jooby:jooby MAVEN version =2.0.0.m1, =2.7.0, =2.7.0, =2.7.0, =2.1.0, =2.6.0, =2.0.6, =2.6.1, =2.0.0, =2.0.0.m1, =2.4.0, =2.4.0, =2.4.0, =2.7.2, =2.0.0.m2, =2.0.0.m1, =2.8.1 and more Source cves: CVE-2020-7647 Source advisory: OSV:GHSA-PX9H-X66R-8MPC...

gradle.plugin.io.jooby:jooby-gradle-plugin (>=2.7.0, <=2.8.1), io.jooby.openapi:io.jooby.openapi.gradle.plugin (>=2.7.0, <=2.8.1) +33 more potentially affected by CVE-2020-7647 via io.jooby:jooby (>=2.0.0.m1, <=2.8.1)

io.jooby:jooby MAVEN version =2.0.0.m1, =2.7.0, =2.7.0, =2.7.0, =2.1.0, =2.6.0, =2.0.6, =2.6.1, =2.0.0, =2.0.0.m1, =2.4.0, =2.4.0, =2.4.0, =2.7.2, =2.0.0.m2, =2.0.0.m1, =2.8.1 and more Source cves: CVE-2020-7647 Source advisory: GHSA-PX9H-X66R-8MPC...

CVE-2020-7647

All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors...

gradle.plugin.io.jooby:jooby-gradle-plugin (>=2.7.0, <=2.8.1), io.jooby.openapi:io.jooby.openapi.gradle.plugin (>=2.7.0, <=2.8.1) +33 more potentially affected by CVE-2020-7647 via io.jooby:jooby (>=2.0.0.m1, <=2.8.1)

io.jooby:jooby MAVEN version =2.0.0.m1, =2.7.0, =2.7.0, =2.7.0, =2.1.0, =2.6.0, =2.0.6, =2.6.1, =2.0.0, =2.0.0.m1, =2.4.0, =2.4.0, =2.4.0, =2.7.2, =2.0.0.m2, =2.0.0.m1, =2.8.1 and more Source cves: CVE-2020-7647 Source advisory: MEND:CVE-2020-7647...

CVE-2020-7647

All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors...

CVE-2020-7647

CVE-2020-7647 affects io.jooby:jooby and org.jooby:jooby. Two directory traversal vectors exist: (1) when sharing a File System directory (assets("/static/**", Paths.get("static"))) the loader may fall back to classpath resources, enabling access to files outside the web root (e.g., configuration...

org.jooby:coverage-report (>=1.0.0.cr1, <=1.1.2), org.jooby:jooby-akka (>=1.0.0.cr1, <=1.6.6) +98 more potentially affected by CVE-2020-7647 via org.jooby:jooby (>=1.0.0.cr1, <=1.6.6)

org.jooby:jooby MAVEN version =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.2.0, =1.0.0.cr1, =1.0.0, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr8, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.6.6 and more Source cves: CVE-2020-7647 Source advisory: SNYK:JAVA-ORGJOOBY-5688...

CVE-2016-7647

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2016. Notes: none...

CVE-2016-7647

...

CVE-2016-7647

CVE-2016-7647 is rejected/not used per initial description; no active vulnerability entry.

CVE-2017-7647

SolarWinds Log & Event Manager LEM before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands...