Lucene search
+L

1 matches found

OSV
OSV
added 2019/11/18 5:19 p.m.34 views

GHSA-89R3-RCPJ-H7W6 Path traversal attack on Windows platforms

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

7.5CVSS5.9AI score0.03094EPSS
SaveExploits0References5
Rows per page
Query Builder