Skip to content
OpenAdvisories

Vendor

rickknowles

1 known vulnerabilities.

Products

Winstone Servlet Container 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2026-56122

    Winstone Servlet Engine 0.9.10 Path Traversal via HTTP Request Paths

    Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences that are not sanitized when serving static files from the co…

    rickknowles Winstone Servlet Container