Directory Traversal

servlets-default is vulnerable to directory traversal attacks. The vulnerability exists due to default configuration of enabling directory traversal, allowing directories to be listed with a ; after a filename with a mapped extension...