Lucene search
+L

4 matches found

Github Security Blog
Github Security Blog
•added 2019/11/18 5:19 p.m.•68 views

Path traversal attack on Windows platforms

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

7.5CVSS4.1AI score0.03094EPSS
SaveExploits0References6Affected Software1
Prion
Prion
•added 2019/09/16 5:15 p.m.•31 views

Path traversal

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

5CVSS7.4AI score0.03094EPSS
SaveExploits0References4Affected Software1
Mend
Mend
•added 2019/09/16 4:36 p.m.•9 views

CVE-2019-0207

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

8.7CVSS0.03094EPSS
SaveExploits0References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/09/16 12:00 a.m.•7 views

CVE-2019-0207: Improper Limitation of a Pathname to a Restricted Directory

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

7.5CVSS7.2AI score0.03094EPSS
SaveExploits0References2
Rows per page
Query Builder