CVE-2017-16139

CVE-2017-16139 affects the jikes file server. The vulnerability is a directory traversal flaw in path resolution that allows an attacker to access the filesystem by placing sequences like "../" in the URL. The initial description notes that accessible files are restricted to those with .htm and ....