Lucene search
+L

182 matches found

Github Security Blog
Github Security Blog
added 2020/03/25 5:35 p.m.72 views

Local file inclusion vulnerability in http4s

Impact This vulnerability applies to all users of: org.http4s.server.staticcontent.FileService org.http4s.server.staticcontent.ResourceService org.http4s.server.staticcontent.WebjarService Path escaping URI normalization is applied incorrectly. Requests whose path info contain ../ or // can expos...

7.6CVSS1.8AI score0.06985EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2020/03/25 5:35 p.m.39 views

GHSA-66Q9-F7FF-MMX6 Local file inclusion vulnerability in http4s

Impact This vulnerability applies to all users of: org.http4s.server.staticcontent.FileService org.http4s.server.staticcontent.ResourceService org.http4s.server.staticcontent.WebjarService Path escaping URI normalization is applied incorrectly. Requests whose path info contain ../ or // can expos...

7.6CVSS6.9AI score0.06985EPSS
SaveExploits0References5
Rows per page
Query Builder