Description
Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.
Remediation
References
Related Vulnerabilities
Drupal Core 4.6.x Cross-Site Request Forgery (4.6.0 - 4.6.9)
Three.js Uncontrolled Resource Consumption Vulnerability (CVE-2020-28496)
WordPress 5.3.x Multiple Vulnerabilities (5.3 - 5.3.2)
WordPress Plugin Enable Media Replace Directory Traversal (3.6.3)
WordPress Plugin Coming Soon/Maintenance mode Ready! Cross-Site Request Forgery (0.5.0)