CVE-2019-0195: Critical severity apache tapestry vulnerability
Manipulating classpath asset file URLs, an attacker could guess the path to a known file in the classpath and have it downloaded. If the attacker found the file with the value of the tapestry.hmac-passphrase configuration symbol, most probably the webapp's AppModule class, the value of this symbol could be used to craft a Java deserialization attack, thus running malicious injected Java code. The vector would be the t:formdata parameter from the Form component.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0195?
CVE-2019-0195 is considered a high severity vulnerability due to its potential to expose sensitive configuration values.
How do I fix CVE-2019-0195?
To fix CVE-2019-0195, it is advisable to upgrade your Apache Tapestry installation to a version above 5.4.3.
What types of systems are affected by CVE-2019-0195?
CVE-2019-0195 affects web applications that utilize Apache Tapestry versions from 5.4.0 to 5.4.3.
What kind of attack does CVE-2019-0195 enable?
CVE-2019-0195 allows attackers to guess file paths in the classpath and potentially download sensitive files.
Is CVE-2019-0195 specific to any configurations?
Yes, CVE-2019-0195 notably involves the manipulation of configuration symbols such as the tapestry.hmac-passphrase.