CVE-2020-13953

Published: Sep 30, 2020

Modified: Aug 4, 2024

PUBLISHED

In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run.

Vendor	Product	Versions
n/a	Apache Tapestry	affected `Apache Tapestry from 5.4.0 to 5.5.0`

x_refsource_MISC

mailing-list

x_refsource_MLIST

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.