A vulnerability, which was classified as critical, has been found in Apache Unomi up to 1.5.1. Affected by this issue is some unknown functionality of the file /context.json of the component Endpoint Handler. Upgrading to version 1.5.2 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at lists.apache.org. The best possible mitigation is suggested to be upgrading to the latest version.

Lien vers l'article source