VYPR

Maven package

com.virjar/ratel-api

pkg:maven/com.virjar/ratel-api

Vulnerabilities (1)

  • CVE-2021-29425Apr 13, 2021
    affected >= 1.0.0, <= 1.3.6

    In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limit