keycloak: path traversal in resources

A flaw was found in keycloak. A path traversal, using URL-encoded path segments in a request, is possible due to transformation of the URL path to a file path at the resource endpoint. The highest threat from this vulnerability is to data confidentiality...

PT-2015-6575

Name of the Vulnerable Software and Affected Versions Drupal Services module versions 7.x-3.x before 7.x-3.12 Description The issue allows remote authenticated users with the "Save file information" permission to execute arbitrary code via a crafted filename in the resource/endpoint for uploading...