PT-2012-3076
CVE-2012-1089
·
تاريخ النشر
2012-03-23
·
تاريخ التحديث
2017-12-13
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Apache Wicket versions 1.4.x through 1.4.19
Apache Wicket versions 1.5.x through 1.5.4
Description
A directory traversal issue allows remote attackers to read arbitrary web-application files via a relative pathname in a URL for a Wicket resource that corresponds to a null package.
Recommendations
For Apache Wicket versions 1.4.x through 1.4.19, update to version 1.4.20 or later.
For Apache Wicket versions 1.5.x through 1.5.4, update to version 1.5.5 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾