Tag

apache-commons-io

Safeguard articles tagged "apache-commons-io" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerabilities

CVE-2021-29425: The Commons IO Path Traversal Bug

CVE-2021-29425 shows how a single unhandled case in Apache Commons IO's path normalization let attackers slip past directory checks that assumed a canonicalized path was actually safe.

Jun 17, 20244 min read