1 matches found
GHSA-89R3-RCPJ-H7W6 Path traversal attack on Windows platforms
Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...
7.5CVSS5.9AI score0.03094EPSS
SaveExploits0References5
20