Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40481
HistoryMay 12, 2023 - 1:51 a.m.

Path Traversal

2023-05-1201:51:50
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
path traversal
spring-boot-actuator-logview
securitycheck function
logviewendpoint.java
validate relative paths
attacker access files.

EPSS

0.001

Percentile

20.1%

spring-boot-actuator-logview is vulnerable to Path Traversal. The vulnerability exists in the securityCheck function of LogViewEndpoint.java because it does not properly validate relative paths, allowing an attacker to access files outside the expected directory through the path such as /usr/outnot

EPSS

0.001

Percentile

20.1%

Related for VERACODE:40481