Vulnerability	Vulnerable Version
C Path Traversal Affected versions of this package are vulnerable to Path Traversal via the file upload process. An attacker can manipulate the file path and content by providing a custom filename in the multipart/form-data request, allowing the file to be written to arbitrary locations on the server where the Java process has write permissions. Note: Genie users who do not store these attachments locally on the underlying file system are not vulnerable to this issue. How to fix Path Traversal? Upgrade `com.netflix.genie:genie-web` to version 4.3.18 or higher.	[,4.3.18)

Path Traversal

Affected versions of this package are vulnerable to Path Traversal via the file upload process. An attacker can manipulate the file path and content by providing a custom filename in the multipart/form-data request, allowing the file to be written to arbitrary locations on the server where the Java process has write permissions.

Note: Genie users who do not store these attachments locally on the underlying file system are not vulnerable to this issue.

How to fix Path Traversal?

Upgrade com.netflix.genie:genie-web to version 4.3.18 or higher.

[,4.3.18)

Go back to all versions of this package