CVE-2016-9177

Published November 4th, 2016

View on NVD ↗

CVSS v3

N/A

CVSS v2

5

MEDIUM

Affected

1

PROJECT

Description

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

perwendel/spark

A simple expressive web framework for java. Spark has a kotlin DSL https://github.com/perwendel/spark-kotlin

GitHub

9.66K