Description

The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability.

Remediation

References

https://bitbucket.org/atlassian/atlasboard/commits/9c03df09f09399e2601010466e8ba3a28236eb9c

Related Vulnerabilities

CVE-2022-41340 Vulnerability in npm package @lionello/secp256k1-js

CVE-2014-0050 Vulnerability in maven package commons-fileupload:commons-fileupload

CVE-2021-25122 Vulnerability in maven package org.apache.tomcat:tomcat-catalina

CVE-2019-14837 Vulnerability in maven package org.keycloak:keycloak-services

CVE-2019-8903 Vulnerability in npm package total.js

Severity

High

Classification

CWE-22 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Tags

Patch Vendor Advisory