THREAT OPS › Threat News › [NVD] CVE-2021-29425 (MEDIUM 4.8) — In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limit
[NVD] CVE-2021-29425 (MEDIUM 4.8) — In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limit
CVE-2021-29425 CVSS: 4.8 MEDIUM Published: 2021-04-13T07:15:12.327
In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use t
Indicators of compromise
- CVE-2021-29425cve
Original source: https://nvd.nist.gov/vuln/detail/CVE-2021-29425