GitHub Advisoryadvisory · Maven

GHSA-pffw-p2q5-w6vh Improper Limitation of a Pathname ('Path Traversal') in org.apache.jspwiki:jspwiki-war

HIGH Published 2019-04-08 Modified 2022-09-17 Official page ↗
Aliases
CVE-2019-0225
Ecosystem
Maven
Packages
org.apache.jspwiki:jspwiki-war
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-22
Reviewed
2020-06-16

Affected packages

• Maven org.apache.jspwiki:jspwiki-war: >= 2.9.0, < 2.11.0.M3 → fixed in 2.11.0.M3

Description

A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by an attacker to obtain registered users' details.

Related

Alias · CVE (1)

  • CVE-2019-0225 A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2,… vulnerability

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References