asf__karaf_CVE-2022-22932_4-3-5

Apache Karaf Apache Karaf는 여러 프레임워크와 프로그래밍 모델REST/API, 웹, 스프링 부트 등을 지원하는 모듈리스 런타임입니다. 변경 가능하거나 변경 불가능한 애플리케이션으로 패키징되어, 노력 없이 바로 활용할 수 있는 턴키 기능을 제공합니다. 개요 핫 배포Hot deployment : Karaf는 애플리케이션의 핫 배포를 지원합니다deploy 디렉토리. 동적 구성Dynamic configuration : Karaf는 구성 파일properties, json 등 다양한 형식을 위해 중앙 위치etc 디렉토...

CVE-2022-22932

Apache Karaf obr: commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr: commands are not very used and the entry is set by user. This has been fixed in revision:...

CVE-2022-22932 Path traversal flaws

Apache Karaf obr: commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr: commands are not very used and the entry is set by user. This has been fixed in revision:...

CVE-2022-22932 Path traversal flaws

Apache Karaf obr: commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr: commands are not very used and the entry is set by user. This has been fixed in revision:...