Path Traversal Vulnerability in Apache Tapestry on Windows Platforms

CVE-2019-0207

Summary

Apache Tapestry is vulnerable to a path traversal attack due to improper filtering of the backslash character in the asset handling process. This flaw allows an attacker to exploit the asset processing functionality, enabling unauthorized access to files on Windows systems. By crafting specific requests, attackers can traverse the directory structure and potentially read sensitive files, posing a severe security risk.

References