TI-2026-40501 CVE-2026-56122 · GHSA-qf2j-8858-jvcv
Winstone Servlet Engine 0.9.10 Path Traversal via HTTP Request Paths
Priority HIGH 77
Winstone Servlet Engine through 0.9.10 contains a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files by sending HTTP GET requests with dot-dot-slash sequences that are not sanitize…