[jboss-jira] [JBoss JIRA] Updated: (JBCOMMON-115) CVE-2009-2693

CVE-2009-2693 ------------- Key: JBCOMMON-115 URL: https://jira.jboss.org/browse/JBCOMMON-115 Project: JBoss Common Issue Type: Bug Security Level: Public(Everyone can see) Components: common-core (2.x) Affects Versions: 2.2.17.GA Reporter: Mike Millson Assignee: Mike Millson Fix For: 2.2.18.GA CVE-2009-2693: When deploying WAR files, the WAR files were not checked for directory traversal attempts. This allows an attacker to create arbitrary content outside of the web root by including entries such as ../../bin/catalina.sh in the WAR.