Reactor Netty vulnerabilities
We track 1 vulnerability in Reactor Netty products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 15, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Reactor Netty vulnerabilities
- 7.5 High severity
Reactor Netty: Improper Limitation of a Pathname to a Restricted Directory
In Reactor Netty HTTP Server, versions 1.1.x prior to 1.1.13 and versions 1.0.x prior to 1.0.39, a malicious user can send a request using a specially crafted URL that can lead to a directory traversal attack. Specifically, an application is vulnerable if Reac