Lucene search

K
redhatcveRedhat.comRH:CVE-2019-10182
HistoryJul 31, 2019 - 1:52 p.m.

CVE-2019-10182

2019-07-3113:52:59
redhat.com
access.redhat.com
10

0.002 Low

EPSS

Percentile

61.7%

It was found that icedtea-web did not properly sanitize paths from elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the context of the user.

Mitigation

No known mitigation.