Skip to content
OpenAdvisories

Product · LINE

Armeria

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2023-38493

    Paths contain matrix variables bypass decorators

    Armeria is a microservice framework Spring supports Matrix variables. When Spring integration is used, Armeria calls Spring controllers via `TomcatService` or `JettyService` with the path that may contain matrix variables. Prior to version 1.24.3, the Armeria…

    LINE Armeria com.linecorp.armeria:armeria Maven
  • High 7.5
    CVE-2021-43795

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in com.linecorp.armeria:armeria

    Armeria is an open source microservice framework. In affected versions an attacker can access an Armeria server's local file system beyond its restricted directory by sending an HTTP request whose path contains `%2F` (encoded `/`), such as `/files/..%2Fsecret…

    LINE Armeria com.linecorp.armeria:armeria Maven