https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 07 Nov 2026 08:52:37 +0000 https://db.gcve.eu/vuln/fkie_cve-2026-121489 <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Apache Juneau.</p> <p>The microservice DirectoryResource does not keep request paths inside its configured root directory. When an application enables the resource&#39;s view, upload or delete settings (all off by default), a client can read, write or delete files outside the root, anywhere the server process has access.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Apache Juneau.</p> <p>The microservice DirectoryResource does not keep request paths inside its configured root directory. When an application enables the resource&#39;s view, upload or delete settings (all off by default), a client can read, write or delete files outside the root, anywhere the server process has access.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> https://db.gcve.eu/vuln/fkie_cve-2026-121489 https://db.gcve.eu/vuln/ghsa-6jw3-6826-3jf9 <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Apache Juneau.</p> <p>The microservice DirectoryResource does not keep request paths inside its configured root directory. When an application enables the resource&#39;s view, upload or delete settings (all off by default), a client can read, write or delete files outside the root, anywhere the server process has access.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> <p>Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;) vulnerability in Apache Juneau.</p> <p>The microservice DirectoryResource does not keep request paths inside its configured root directory. When an application enables the resource&#39;s view, upload or delete settings (all off by default), a client can read, write or delete files outside the root, anywhere the server process has access.</p> <p>This issue affects Apache Juneau: through 9.2.0.</p> <p>Users are recommended to upgrade to version 9.2.1, which fixes the issue.</p> https://db.gcve.eu/vuln/ghsa-6jw3-6826-3jf9