Описание
Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI
Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
Пакеты
Наименование
com.sparkjava:spark-core
maven
Затронутые версииВерсия исправления
< 2.5.2
2.5.2
Связанные уязвимости
CVSS3: 7.5
redhat
больше 9 лет назад
Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
CVSS3: 7.5
nvd
больше 9 лет назад
Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.