| Package | Affected versions | Patched versions |
|---|---|---|
| java http server | = 1.0 |
Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free