CVE-2021-40525
Path traversal in Apache James
概要
Path traversal in Apache James
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Apache James ManagedSieve implementation alongside with the file storage for sieve scripts is vulnerable to path traversal, allowing reading and writing any file. This vulnerability had been patched in Apache James 3.6.1 and higher. We recommend the upgrade. Distributed and Cassandra based products are also not impacted.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
Maven
org.apache.james:james-server
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"3.6.1"}]}]
参照URL
- advisory nvd.nist.gov
- package github.com
- web openwall.com
- web openwall.com
- web openwall.com