CVE-2017-20284

Caucho Resin contains a path traversal vulnerability in its resin-doc documentation webapp. The flaw resides in the jndi-appconfig tutorial servlet , where the inputFile request parameter accepts relative paths with directory traversal sequences, allowing remote unauthenticated attackers to read ...