Description

The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability.

Remediation

References

https://bitbucket.org/atlassian/atlasboard/commits/9c03df09f09399e2601010466e8ba3a28236eb9c

Related Vulnerabilities

CVE-2011-2204 Vulnerability in maven package org.apache.tomcat:tomcat-catalina

CVE-2020-13943 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2020-28491 Vulnerability in maven package com.fasterxml.jackson.dataformat:jackson-dataformat-cbor

CVE-2020-11971 Vulnerability in maven package org.apache.camel:camel-main

CVE-2013-4002 Vulnerability in maven package xerces:xercesimpl

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Patch Vendor Advisory