Uploaded image for project: 'FishEye'
  1. FishEye
  2. FE-6896

Arbitrary resource forwarding vulnerability in TotalityFilter

XMLWordPrintable

      There is an arbitrary resource forwarding vulnerability in TotalityFilter. The vulnerability can be triggered via the JsonRewrite class, and can lead to execution of arbitrary JSP files or downloading configuration files under the WEB-INF.

              Unassigned Unassigned
              pswiecicki Piotr Swiecicki
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: