{"id":"CVE-2020-7647","aliases":["GHSA-px9h-x66r-8mpc"],"url":"https://o3.security/vulnerability/CVE-2020-7647","summary":"path traversal in Jooby","details":"All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors.","published":"2020-05-11T20:15:12.463Z","modified":"2026-07-08T22:14:48.683948Z","cvss":{"score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"},"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Maven","name":"io.jooby:jooby","fixedVersion":"2.8.2"},{"ecosystem":"Maven","name":"org.jooby:jooby","fixedVersion":"2.8.2"}],"fix":{"url":"https://github.com/jooby-project/jooby/commit/34f526028e6cd0652125baa33936ffb6a8a4a009","label":"jooby-project/jooby@34f5260"},"references":[{"type":"ADVISORY","url":"https://snyk.io/vuln/SNYK-JAVA-IOJOOBY-568806%2C"},{"type":"ADVISORY","url":"https://snyk.io/vuln/SNYK-JAVA-ORGJOOBY-568807%2C"},{"type":"FIX","url":"https://github.com/jooby-project/jooby/commit/34f526028e6cd0652125baa33936ffb6a8a4a009"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-07-08T22:14:48.683948Z"}}