REDHAT-BUG-2327614: Path Traversal
Applications serving static resources through the functional web frameworks WebMvc.fn or WebFlux.fn are vulnerable to path traversal attacks. An attacker can craft malicious HTTP requests and obtain any file on the file system that is also accessible to the process in which the Spring application is running.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2327614?
REDHAT-BUG-2327614 is classified as a critical vulnerability due to its potential for path traversal attacks.
How do I fix REDHAT-BUG-2327614?
To fix REDHAT-BUG-2327614, update your Spring WebMvc.fn and Spring WebFlux.fn applications to the latest patched version.
What are the potential impacts of REDHAT-BUG-2327614?
The potential impacts of REDHAT-BUG-2327614 include unauthorized access to sensitive files on the server.
Which applications are affected by REDHAT-BUG-2327614?
Applications using Spring WebMvc.fn and Spring WebFlux.fn are affected by REDHAT-BUG-2327614.
How can I identify if my application is vulnerable to REDHAT-BUG-2327614?
You can identify vulnerability to REDHAT-BUG-2327614 by reviewing your application's code for improper input validation in file handling.