Skip to content
OpenAdvisories

Product · Apache

Apache Karaf

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.5

    Moderate severity vulnerability that affects org.apache.karaf:apache-karaf and org.apache.karaf:karaf

    Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the content of these paths to the Karaf repo and resources directories. However, it doesn't do any validat…