Skip to content
OpenAdvisories

Package · Maven

com.sparkjava:spark-core

2 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.5
    CVE-2016-9177 Public exploit

    Spark allows remote attackers to read arbitrary files via a .. (dot dot) in the URI

    Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.