org.jooby:jooby-akka (1.6.5), org.jooby:jooby-apitool (1.6.5) +84 more potentially affected by CVE-2020-7647 via org.jooby:jooby (1.6.5)

org.jooby:jooby MAVEN version 1.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-akka 1.6.5 - org.jooby:jooby-apitool 1.6.5 - org.jooby:jooby-assets 1.6.5 - org.jooby:jooby-assets-autoprefixer...

org.jooby:coverage-report (0.6.0), org.jooby:jooby-camel (0.6.0) +19 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.6.0)

org.jooby:jooby MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.6.0 - org.jooby:jooby-camel 0.6.0 - org.jooby:jooby-ehcache 0.6.0 - org.jooby:jooby-elasticsearch 0.6...

gradle.plugin.io.jooby:jooby-gradle-plugin (>=2.7.0, <=2.8.1), io.jooby.openapi:io.jooby.openapi.gradle.plugin (>=2.7.0, <=2.8.1) +33 more potentially affected by CVE-2020-7647 via io.jooby:jooby (>=2.0.0.m1, <=2.8.1)

io.jooby:jooby MAVEN version =2.0.0.m1, =2.7.0, =2.7.0, =2.7.0, =2.1.0, =2.6.0, =2.0.6, =2.6.1, =2.0.0, =2.0.0.m1, =2.4.0, =2.4.0, =2.4.0, =2.7.2, =2.0.0.m2, =2.0.0.m1, =2.8.1 and more Source cves: CVE-2020-7647 Source advisory: OSV:GHSA-PX9H-X66R-8MPC...

path traversal in Jooby

Impact Access to sensitive information available from classpath. Patches Patched version: 1.6.7 and 2.8.2 Commit 1.x: https://github.com/jooby-project/jooby/commit/34f526028e6cd0652125baa33936ffb6a8a4a009 Commit 2.x:...

org.jooby:jooby-hbm (0.1.0), org.jooby:jooby-hbs (0.1.0) +3 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.1.0)

org.jooby:jooby MAVEN version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:jooby-hbm 0.1.0 - org.jooby:jooby-hbs 0.1.0 - org.jooby:jooby-jackson 0.1.0 - org.jooby:jooby-jdbc 0.1.0 -...

org.jooby:coverage-report (0.9.2), org.jooby:jooby-aws (0.9.2) +28 more potentially affected by CVE-2020-7647 via org.jooby:jooby (0.9.2)

org.jooby:jooby MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.jooby:jooby and may be impacted: - org.jooby:coverage-report 0.9.2 - org.jooby:jooby-aws 0.9.2 - org.jooby:jooby-camel 0.9.2 - org.jooby:jooby-commons-email 0.9.2 -...

gradle.plugin.io.jooby:jooby-gradle-plugin (>=2.7.0, <=2.8.1), io.jooby.openapi:io.jooby.openapi.gradle.plugin (>=2.7.0, <=2.8.1) +33 more potentially affected by CVE-2020-7647 via io.jooby:jooby (>=2.0.0.m1, <=2.8.1)

io.jooby:jooby MAVEN version =2.0.0.m1, =2.7.0, =2.7.0, =2.7.0, =2.1.0, =2.6.0, =2.0.6, =2.6.1, =2.0.0, =2.0.0.m1, =2.4.0, =2.4.0, =2.4.0, =2.7.2, =2.0.0.m2, =2.0.0.m1, =2.8.1 and more Source cves: CVE-2020-7647 Source advisory: GHSA-PX9H-X66R-8MPC...

Directory Traversal

jooby is vulnerable to directory traversal. Lack of path validation allows an attacker to inject ../ characters and access files outside of the web root directory...

CVE-2020-7647

All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors...

Directory traversal

All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors...

CVE-2020-7647

All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors...

gradle.plugin.io.jooby:jooby-gradle-plugin (>=2.7.0, <=2.8.1), io.jooby.openapi:io.jooby.openapi.gradle.plugin (>=2.7.0, <=2.8.1) +33 more potentially affected by CVE-2020-7647 via io.jooby:jooby (>=2.0.0.m1, <=2.8.1)

io.jooby:jooby MAVEN version =2.0.0.m1, =2.7.0, =2.7.0, =2.7.0, =2.1.0, =2.6.0, =2.0.6, =2.6.1, =2.0.0, =2.0.0.m1, =2.4.0, =2.4.0, =2.4.0, =2.7.2, =2.0.0.m2, =2.0.0.m1, =2.8.1 and more Source cves: CVE-2020-7647 Source advisory: MEND:CVE-2020-7647...

org.jooby:coverage-report (>=1.0.0.cr1, <=1.1.2), org.jooby:jooby-akka (>=1.0.0.cr1, <=1.6.6) +98 more potentially affected by CVE-2020-7647 via org.jooby:jooby (>=1.0.0.cr1, <=1.6.6)

org.jooby:jooby MAVEN version =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.2.0, =1.0.0.cr1, =1.0.0, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr8, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.0.0.cr1, =1.6.6 and more Source cves: CVE-2020-7647 Source advisory: SNYK:JAVA-ORGJOOBY-5688...

Directory Traversal

Overview org.jooby:jooby is a modern, performant and easy to use web framework for Java and Kotlin built on top of your favorite web server. Affected versions of this package are vulnerable to Directory Traversal. There are two ways this vulnerability can be leveraged: When sharing a File System...

Directory Traversal

Overview io.jooby:jooby is a modular web framework for Java and Kotlin. Affected versions of this package are vulnerable to Directory Traversal. There are two ways this vulnerability can be leveraged: When sharing a File System directory as in: assets"/static/", Paths.get"static" The class path...

PT-2020-19680

Name of the Vulnerable Software and Affected Versions io.jooby:jooby versions prior to 1.6.7 org.jooby:jooby versions prior to 1.6.7 io.jooby:jooby versions 2.0.0 through 2.8.2 org.jooby:jooby versions 2.0.0 through 2.8.2 Description The issue allows access to sensitive information available from...

Jooby Environmental Issues Vulnerability

Jooby is a modular micro-Web framework for Java and Kotlin . An environmental issue vulnerability exists in Jooby versions prior to 2.2.1 that stems from a user input validation error in the response header. A remote attacker can exploit this vulnerability to inject arbitrary HTTP headers...

CVE-2020-7622

This affects the package io.jooby:jooby-netty before 1.6.9, from 2.0.0 and before 2.2.1. The DefaultHttpHeaders is set to false which means it does not validates that the header isn't being abused for HTTP Response Splitting...

CVE-2020-7622

This affects the package io.jooby:jooby-netty before 1.6.9, from 2.0.0 and before 2.2.1. The DefaultHttpHeaders is set to false which means it does not validates that the header isn't being abused for HTTP Response Splitting...

CVE-2020-7622

CVE-2020-7622 affects io.jooby:jooby-netty before 1.6.9 and before 2.2.1, where DefaultHttpHeaders is set to false and header validation is disabled, enabling HTTP Response Splitting as described in public advisories. Exploitation status is not provided in the docs. Impact is a potential for abus...