Path traversal flaws

Vulnerability

Apache Karaf versions prior to 4.2.15 and 4.3.6 are affected by a partial path traversal vulnerability in the obr:* commands and the run goal of the karaf-maven-plugin. The flaw allows breaking out of the expected folder due to insufficient path canonicalization [1][4].

Exploitation

An attacker must have the ability to execute obr:* commands or the run goal, and the entry path is set by the user. By providing a specially crafted path, an attacker can exploit the partial path traversal to escape the intended directory. The risk is considered low because these commands are not commonly used [4].

Impact

Successful exploitation allows an attacker to access files outside the expected folder, potentially leading to unauthorized information disclosure or file manipulation, depending on the context. The severity is rated low [1].

Mitigation

Users should upgrade to Apache Karaf 4.2.15, 4.3.6, or later. The fix is included in commits [2]. No other workarounds are available; users must ensure correct paths are used [4].