PT-2021-2689 · Apache +6 · Apache Commons Io +6

Name of the Vulnerable Software and Affected Versions: Apache Commons IO versions prior to 2.7 Description: The issue is related to the FileNameUtils.normalize method in Apache Commons IO, which incorrectly handles directory traversal sequences such as "//../foo" or "..foo". This could allow a...