Path Manipulation Vulnerability in Apache Tapestry Framework

CVE-2019-0195

Summary

This vulnerability allows an attacker to manipulate classpath asset file URLs to gain access to files within the application. By guessing paths to known files, an attacker could potentially download sensitive configuration symbols such as the tapestry.hmac-passphrase. If this passphrase is retrieved, it opens the door to Java deserialization attacks, allowing malicious actors to execute injected Java code through a crafted request using the t:formdata parameter. This emphasizes the importance of securing web application file access to prevent unauthorized data exposure and code execution.

References