Impact
Access to lateral directories when using app.static if using encoded %2F URLs. Parent directory traversal is not impacted.
Patches
- v20.12.7 (LTS)
- v21.12.2 (LTS)
- v22.6.1
References
#2478
#2495
For more information
If you have any questions or comments about this advisory:
Impact
Access to lateral directories when using
app.staticif using encoded%2FURLs. Parent directory traversal is not impacted.Patches
References
#2478
#2495
For more information
If you have any questions or comments about this advisory: