Skip to content
OpenAdvisories
High · 7.5 CVE-2019-25333 EUVD-2019-19575GHSA-6w4g-qqq8-cvqr

Bullwark Momentum Series JAWS 1.0 - 'Momentum Series JAWS' Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Published Feb 12, 2026 · Updated Feb 13, 2026 · Assigned by VulnCheck

Description

Bullwark Momentum Series JAWS 1.0 contains a directory traversal vulnerability that allows unauthenticated attackers to access system files by manipulating HTTP request paths. Attackers can exploit the vulnerability by sending crafted GET requests with multiple '../' sequences to read sensitive files like /etc/passwd outside the web root directory.

Affected products

VendorProductAffectedFixed
Bullwark Momentum Series JAWS 1.0 —

References