Product · Apache Software Foundation

Apache Karaf

15 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.3

CVE-2022-22932 Public exploit

Path traversal flaws

Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder. The risk is low as obr:* commands are not very used and the entry is set by user. This has been fixed in revision: htt…

Apache Software Foundation Apache Karaf org.apache.karaf:apache-karaf Maven

Jan 26, 2022