Medium severity5.3NVD Advisory· Published May 11, 2020· Updated Jun 17, 2026
CVE-2020-7647
CVE-2020-7647
Description
All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
io.jooby:joobyMaven | < 2.8.2 | 2.8.2 |
org.jooby:joobyMaven | < 2.8.2 | 2.8.2 |
Affected products
4- jooby/joobydescription
- ghsa-coords2 versions
< 2.8.2+ 1 more
- (no CPE)range: < 2.8.2
- (no CPE)range: < 2.8.2
Patches
Vulnerability mechanics
References
10- github.com/jooby-project/jooby/commit/34f526028e6cd0652125baa33936ffb6a8a4a009nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-px9h-x66r-8mpcghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-7647ghsaADVISORY
- github.com/jooby-project/jooby/security/advisories/GHSA-px9h-x66r-8mpcghsaWEB
- snyk.io/vuln/SNYK-JAVA-IOJOOBY-568806ghsaWEB
- snyk.io/vuln/SNYK-JAVA-IOJOOBY-568806,ghsaWEB
- snyk.io/vuln/SNYK-JAVA-ORGJOOBY-568807ghsaWEB
- snyk.io/vuln/SNYK-JAVA-ORGJOOBY-568807,ghsaWEB
- snyk.io/vuln/SNYK-JAVA-IOJOOBY-568806%2Cnvd
- snyk.io/vuln/SNYK-JAVA-ORGJOOBY-568807%2Cnvd
News mentions
0No linked articles in our index yet.