CVE-2020-13953

In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run

published September 30, 2020

CVSS
—
EPSS
3%
Percentile
85.5
In the wild
Unconfirmed
What it is

In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02651 · 85.5th percentile
Published
2020-09-30T16:51Z
EPSS history
Timeline
  • 30 SEP 16:51Z
    In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run
    cvelistv5