PT-2026-25062 · Apache · Apache Ivy
CVSS v3.1
6.3
Medium
| Vector | AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Apache Livy versions 0.3.0 through 0.8.9
Description
An improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in Apache Livy. This issue can be exploited with non-default Apache Livy Server settings. Specifically, if the
livy.file.local-dir-whitelist configuration value is set to a non-default value, the directory checking can be bypassed.Recommendations
Upgrade to version 0.9.0 to resolve this issue.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Apache Ivy