Description
There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request.
Remediation
References
https://github.com/maybe-why-not/reponame/issues/2
Related Vulnerabilities
CVE-2020-13445 Vulnerability in maven package com.liferay:com.liferay.portal.template.freemarker
CVE-2021-34435 Vulnerability in npm package @theia/mini-browser
CVE-2022-0868 Vulnerability in npm package urijs
CVE-2019-5417 Vulnerability in npm package serve
CVE-2010-3863 Vulnerability in maven package org.apache.shiro:shiro-all