Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the filename parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cocoon | Apache | 2.1 (including) | 2.1 (including) |
| Cocoon | Apache | 2.1.2 (including) | 2.1.2 (including) |
| Cocoon | Apache | 2.2 (including) | 2.2 (including) |