[jboss-jira] [JBoss JIRA] Resolved: (JBCOMMON-108) CVE-2009-2693

CVE-2009-2693 ------------- Key: JBCOMMON-108 URL: https://jira.jboss.org/jira/browse/JBCOMMON-108 Project: JBoss Common Issue Type: Bug Security Level: Public(Everyone can see) Components: common-old (1.x) Affects Versions: 1.0.0.GA, 1.2.1.GA Reporter: Mike Millson Attachments: patch.JBossCommon_1_2_1_GA_CP.txt CVE-2009-2693: When deploying WAR files, the WAR files were not checked for directory traversal attempts. This allows an attacker to create arbitrary content outside of the web root by including entries such as ../../bin/catalina.sh in the WAR.