CVE-2019-0225

Apache JSPWiki versions 2.9.0 to 2.11.0.M2 are affected by a path traversal vulnerability that allows a specially crafted URL to access files under the application ROOT and could disclose registered user details. Root cause described across multiple sources points to improper access control in UR...