application performance management CVEs · Protected by Waratek

Protected by Waratek 2 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%

Critical 0 0.0% High 0 0.0% Medium 2 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 2 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 100.0%

split by StatusSeverityProtectionExploit maturity peak 1 / month

Nov 191 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Dec 190 Jan 200 Feb 200 Mar 200 Apr 200 May 200 Jun 200 Jul 200 Aug 200 Sep 200 Oct 200 Nov 200 Dec 200 Jan 210 Feb 210 Mar 210 Apr 211 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1

Dec 19Feb 20Apr 20Jun 20Aug 20Oct 20Dec 20Feb 21Apr 21

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2021-29425	Medium	2021-04-13	Protected by Waratek	No public exploit	In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.
CVE-2019-10219	Medium	2019-11-08	Protected by Waratek	No public exploit	A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2021-29425

Medium

2021-04-13

Protected by Waratek

No public exploit

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.

CVE-2019-10219

Medium

2019-11-08

Protected by Waratek

No public exploit

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.