Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy. This issue affects Apache Livy: from 0.3

APACHE

13-03-2026 16:55

CVE-2025-66249 Vulnerabilidad documentada

Sin puntuación

Tags

#apache

#exploit

#server

#list

#config

#vulnerability

#improper

#bypass

#pass

#issue

#fix

#configuration

#affect

Descripción

Improper Limitation of a Pathname to Restricted Directory ('Path Traversal') vulnerability in Apache Livy. This issue affects Livy: from 0.3.0 before 0.9.0. The can only be exploited with non-default Livy Server settings. If the configuration value "livy.file.local-dir-whitelist" is set value, the directory checking bypassed. Users are recommended upgrade version 0.9.0, which fixes issue.

https://lists.apache.org/thread/1xwphsfn4jbtym4k4o0zlvwfogwqwwc3

http://www.openwall.com/lists/oss-security/2026/03/12/2

Referencia

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2025-66249

Resultados similares

Coincidentes en almenos en 50% de los tags

13-03-2026 CVE-2025-60012
Malicious configuration can lead to unauthorized file access in Apache Livy. This issue affect...
Ver información

25-02-2026 CVE-2026-27636
FreeScout is a free help desk and shared inbox built with PHP's Laravel framework. Prior to ver...
Ver información