Description
The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability.
Remediation
References
https://bitbucket.org/atlassian/atlasboard/commits/9c03df09f09399e2601010466e8ba3a28236eb9c
Related Vulnerabilities
CVE-2018-8013 Vulnerability in maven package org.eclipse.birt.runtime.3_7_1:org.apache.batik.dom
CVE-2021-21347 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2019-19919 Vulnerability in maven package org.webjars.npm:handlebars
CVE-2016-10735 Vulnerability in maven package ua.mobius.media:bootstrap
CVE-2016-0789 Vulnerability in maven package org.jenkins-ci.main:jenkins-core