Archive

5 January 2021

Vulnerabilities first published on this day (UTC), newest first.

← December 2020 2021 / January /5 February 2021 →

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.7

CVE-2021-21234 Public exploit EPSS 21%

Directory Traversal

spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is maven package "eu.hinsch:spring-boot-actuator-logview". In spring-boot-actuator-logview before version 0.2.13 there is a directory traversal vu…

lukashinsch spring-boot-actuator-logview eu.hinsch:spring-boot-actuator-logview Maven

Jan 5, 2021
High 7.5

CVE-2020-17518 Public exploit EPSS 49%

Apache Flink directory traversal attack: remote file writing through the REST API

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users…

Apache Software Foundation Apache Flink org.apache.flink:flink-runtime Maven

Jan 5, 2021