Apache Software Foundation Commons IO 2.3

CPE Details

Apache Software Foundation Commons IO 2.3
apache
commons_io
2.3
2021-04-29
23h28 +00:00
2021-05-03
09h16 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:apache:commons_io:2.3:-:*:*:*:*:*:*

Informations

Vendor

apache

Product

commons_io

Version

2.3

Update

-

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2021-29425 2021-04-13 04h50 +00:00 In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.
4.8
Medium