perwendel__spark_CVE-2016-9177_2-5-1

Spark——一个面向 Java 8 的微型 Web 框架 Spark 2.9.4 已发布！！ root@kitploit: com.sparkjava spark-core 2.9.4 在此赞助该项目：https://github.com/sponsors/perwendel 文档请访问：http://sparkjava.com/documentation 使用问题请借助 带有“spark-java”标签的 stack overflow Javadoc：http://javadoc.io/doc/com.sparkjava/spark-core 在向项目提交代码时，请使用...

PT-2026-64810

Name of the Vulnerable Software and Affected Versions perwendel spark versions prior to 2.9.5 Description A flaw in the SparkJava component allows remote attackers to trigger symlink following. This occurs within the staticFiles.externalLocation function located in the...