asf__karaf_CVE-2022-22932_4-3-5

Apache Karaf Apache Karaf 是一个模块化运行时，支持多种框架和编程模型（REST/API、Web、Spring Boot 等）。它提供可直接利用的即用功能，无需任何额外工作，并以可变或不可变应用程序的形式打包。 概述 热部署 ：Karaf 支持应用程序的热部署（在 deploy 目录中）。 动态配置 ：Karaf 使用集中位置（etc 目录）进行配置（不同格式，如 properties、json），并可接入现有配置后端。 日志系统 ：使用由 Log4J 支持的集中式日志后端，Karaf 支持多种不同的 API（JDK...

CVE-2022-22932

Apache Karaf obr: commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr: commands are not very used and the entry is set by user. This has been fixed in revision:...

CVE-2022-22932 Path traversal flaws

Apache Karaf obr: commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr: commands are not very used and the entry is set by user. This has been fixed in revision:...

CVE-2022-22932 Path traversal flaws

Apache Karaf obr: commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr: commands are not very used and the entry is set by user. This has been fixed in revision:...