AVG-1805 log
| Package | java-commons-io |
| Status | Fixed |
| Severity | Medium |
| Type | directory traversal |
| Affected | 2.6-2 |
| Fixed | 2.8.0-1 |
| Current | 2.15.1-1 [extra] |
| Ticket | None |
| Created | Mon Apr 12 18:40:28 2021 |
| Issue | Severity | Remote | Type | Description |
|---|---|---|---|---|
| CVE-2021-29425 | Medium | Yes | Directory traversal | In Apache Commons IO before 2.7, when invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result... |