Homepage

org.apache.geronimo.plugins:console@2.1 vulnerabilities

  • latest version

    3.0.1

  • latest non vulnerable version

    3.0.1

  • first published

    16 years ago

  • latest version published

    11 years ago

  • licenses detected

  • package manager

    View on Maven Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the org.apache.geronimo.plugins:console package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • C
    Directory Traversal

    org.apache.geronimo.plugins:console is a Geronimo administration console supporting dynamic extensions.

    Affected versions of this package are vulnerable to Directory Traversal. Multiple directory traversal vulnerabilities in the web administration console in Apache Geronimo Application Server 2.1 through 2.1.3 on Windows allow remote attackers to upload files to arbitrary directories via directory traversal sequences in the (1) group, (2) artifact, (3) version, or (4) fileType parameter to console/portal//Services/Repository (aka the Services/Repository portlet); the (5) createDB parameter to console/portal/Embedded DB/DB Manager (aka the Embedded DB/DB Manager portlet); or the (6) filename parameter to the createKeystore script in the Security/Keystores portlet.

    How to fix Directory Traversal?

    Upgrade org.apache.geronimo.plugins:console to version 2.1.4 or higher.

    [,2.1.4)
    Go back to all versions of this package