CVE-2019-10182

It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from elements in JNLP files. An attacker could trick a victim into running a specially crafted application and use this flaw to upload arbitrary files to arbitrary locations in the context of the user.

Date published : 2019-07-31

https://seclists.org/bugtraq/2019/Oct/5

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10182