CVE-2023-4760

CVE-2023-4760 affects Eclipse RAP versions 3.0.0–3.25.0. The issue arises from the FileUploadProcessor.stripFileName(String name) path handling: when a "/" is found, the portion before it is discarded, but backslashes that appear later may be kept. This can allow Remote Code Execution on Windows ...