BASIS BBj vulnerabilities
1 known vulnerability in BASIS BBj from BASIS International. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
1critical
0high
0exploited
9.3average CVSS score
Latest first
- 9.3 Critical severity
BASIS BBj: Improper Limitation of a Pathname to a Restricted Directory
BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize input path segments. This allows unauthenticated directory traversal sequences to cause the server to read arbitrary system files accessible t