asf__tapestry-5_CVE-2019-0207_5-4-4

This repository does not have a README...

CVE-2019-0207

creationtimestamp| type| source ---|---|--- 2025-08-18 21:02:41+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lwpcbo5omu2m...

CVE-2019-0207

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character \, so attacker can perform a path traversal attack to read any files on Windows platform...

CVE-2019-0207

The CVE-2019-0207 issue involves the Tapestry framework’s asset handling, where the asset path chain StaticFilesFilter → AssetDispatcher → ContextResource fails to filter the backslash character on Windows, enabling path traversal to read arbitrary files. Affected component: Tapestry assets proce...

CVE-2019-0207

Tapestry processes assets /assets/ctx using classes chain StaticFilesFilter - AssetDispatcher - ContextResource, which doesn't filter the character , so attacker can perform a path traversal attack to read any files on Windows platform...

com.nhl.bootique.tapestry:bootique-tapestry (0.1), de.julielab:julie-elastic-query-components (1.0.3) +27 more potentially affected by CVE-2019-0207 via org.apache.tapestry:tapestry-core (>=5.4.0, <=5.4.4)

org.apache.tapestry:tapestry-core MAVEN version =5.4.0, =0.2, =1.2.0, =1.1.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.4 and more Source cves: CVE-2019-0207 Source advisory: MEND:CVE-2019-0207...