CVE-2022-22932

Apache Karaf obr: commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr: commands are not very used and the entry is set by user. This has been fixed in revision:...

CVE-2022-22932: Improper Limitation of a Pathname to a Restricted Directory

Apache Karaf obr: commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr: commands are not very used and the entry is set by user. This has been fixed in revision:...

PT-2022-15741

Name of the Vulnerable Software and Affected Versions Apache Karaf versions prior to 4.2.15 Apache Karaf versions prior to 4.3.6 Description The issue is related to partial path traversal in Apache Karaf obr: commands and the run goal on the karaf-maven-plugin, allowing an attacker to break out o...