CVE-2019-10182 log
| Source |
|
| Severity | High |
| Remote | Yes |
| Type | Directory traversal |
| Description | It was found that icedtea-web did not properly sanitize paths from <jar/> elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the context of the user. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-1017 | icedtea-web | 1.7-1 | 1.8.3-1 | High | Fixed |