CVE-2021-44138: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

April 5, 2022 (updated April 22, 2022)

There is a Directory traversal vulnerability in Caucho Resin, as distributed in Resin 4.0.52 - 4.0.56, which allows remote attackers to read files in arbitrary directories via a ; in a pathname within an HTTP request.

References

github.com/advisories/GHSA-4w2q-9hp2-vxj5
github.com/maybe-why-not/reponame/issues/2
nvd.nist.gov/vuln/detail/CVE-2021-44138

Detect and mitigate CVE-2021-44138 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →