EUVD-2020-0436

Malware in sbrugna...

CVE-2020-7647

CVE-2020-7647 affects io.jooby:jooby and org.jooby:jooby. Two directory traversal vectors exist: (1) when sharing a File System directory (assets("/static/**", Paths.get("static"))) the loader may fall back to classpath resources, enabling access to files outside the web root (e.g., configuration...