Directory Traversal Vulnerability in DKPro Core API Allows Overwriting of Local Files

CVE-2019-11082 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:P

core/api/datasets/internal/actions/Explode.java in the Dataset API in DKPro Core through 1.10.0 allows Directory Traversal, resulting in the overwrite of local files with the contents of an archive.

Learn more about our Api Penetration Testing.