Description
In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests for a limited number of file types.
Remediation
References
https://bugs.eclipse.org/bugs/show_bug.cgi?id=545835
http://www.securityfocus.com/bid/107844
Related Vulnerabilities
CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-dbcp-service
CVE-2016-4993 Vulnerability in maven package io.undertow:undertow-core
CVE-2023-41037 Vulnerability in maven package org.webjars.npm:github-com-openpgpjs-openpgpjs
CVE-2021-45105 Vulnerability in maven package org.apache.logging.log4j:log4j-core
CVE-2015-6748 Vulnerability in maven package org.jsoup:jsoup