Apache Software Foundation Commons IO 2.5

CPE Details

Apache Software Foundation Commons IO 2.5
apache
commons_io
2.5
2021-04-29
23h28 +00:00
2021-05-03
09h16 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:apache:commons_io:2.5:-:*:*:*:*:*:*

Informations

Vendor

apache

Product

commons_io

Version

2.5

Update

-

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2021-29425 2021-04-13 04h50 +00:00 In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.
4.8
Moyen