CVE:CVE-2021-29425
CNNVD:CNNVD-202104-702
Apache Commons IO是美国阿帕奇（Apache）基金会的一个应用程序。提供一个帮助开发IO功能。
Apache Commons IO 2.2版本至2.6版本存在路径遍历漏洞，该漏洞源于当使用不正确的输入字符串（例如“ //../foo”或“  ..  foo”）调用FileNameUtils.normalize方法时，则可能会提供对父目录中文件的访问权限。
solution:Upgrade apache commons_io to a higher version than 2.2,2.3,2.4,2.5,2.6,and avoid the version 2.2,2.3,2.4,2.5,2.6; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0; Upgrade oracle access_manager to a higher version than 11.1.2.3.0,12.2.1.3.0,12.2.1.4.0,and avoid the version 11.1.2.3.0,12.2.1.3.0,12.2.1.4.0; Upgrade oracle agile_engineering_data_management to a higher version than 6.2.1.0,and avoid the version 6.2.1.0; Upgrade oracle agile_plm to a higher version than 9.3.6,and avoid the version 9.3.6; Upgrade oracle application_performance_management to a higher version than 13.4.1.0,13.5.1.0,and avoid the version 13.4.1.0,13.5.1.0; Upgrade oracle application_testing_suite to a higher version than 13.3.0.1,and avoid the version 13.3.0.1; Upgrade oracle banking_apis to a higher version than 18.1,18.2,18.3,19.1,19.2,20.1,21.1,and avoid the version 18.1,18.2,18.3,19.1,19.2,20.1,21.1; Upgrade oracle banking_digital_experience to a higher version than 17.2,18.1,18.3,19.1,19.2,20.1,21.1,and avoid the version 17.2,18.1,18.3,19.1,19.2,20.1,21.1; Upgrade oracle banking_enterprise_default_management to a higher version than 2.6.2,2.7.0,2.7.1,2.10.0,2.12.0,and avoid the version 2.6.2,2.7.0,2.7.1,2.10.0,2.12.0; Upgrade oracle banking_enterprise_default_managment to a higher version than 2.4.0,and avoid the version [2.3.0,2.4.0]; Upgrade oracle banking_party_management to a higher version than 2.7.0,and avoid the version 2.7.0; Upgrade oracle banking_platform to a higher version than 2.4.1,2.6.2,2.7.0,2.7.1,and avoid the version [2.3.0,2.4.1],2.6.2,2.7.0,2.7.1; Upgrade oracle blockchain_platform to a higher version than 21.1.2,and avoid the version (,21.1.2); Upgrade oracle commerce_guided_search to a higher version than 11.3.2,and avoid the version 11.3.2; Upgrade oracle communications_application_session_controller to a higher version than 3.9.0,and avoid the version 3.9.0; Upgrade oracle communications_billing_and_revenue_management_elastic_charging_engine to a higher version than 11.3,12.0,and avoid the version 11.3,12.0; Upgrade oracle communications_cloud_native_core_network_repository_function to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_cloud_native_core_policy to a higher version than 1.14.0,and avoid the version 1.14.0; Upgrade oracle communications_cloud_native_core_unified_data_repository to a higher version than 1.4.0,and avoid the version 1.4.0; Upgrade oracle communications_contacts_server to a higher version than 8.0.0.6.0,and avoid the version 8.0.0.6.0; Upgrade oracle communications_converged_application_server_-_service_controller to a higher version than 6.2,and avoid the version 6.2; Upgrade oracle communications_convergence to a higher version than 3.0.2.2.0,and avoid the version 3.0.2.2.0; Upgrade oracle communications_design_studio to a higher version than 7.4.2,7.3.5,and avoid the version [7.4.0,7.4.2],7.3.5; Upgrade oracle communications_diameter_intelligence_hub to a higher version than 8.1.0,8.2.3,and avoid the version [8.0.0,8.1.0],[8.2.0,8.2.3]; Upgrade oracle communications_interactive_session_recorder to a higher version than 6.3,6.4,and avoid the version 6.3,6.4; Upgrade oracle communications_offline_mediation_controller to a higher version than 12.0.0.3,and avoid the version 12.0.0.3; Upgrade oracle communications_order_and_service_management to a higher version than 7.3,7.4,and avoid the version 7.3,7.4; Upgrade oracle communications_policy_management to a higher version than 12.5.0.0.0,and avoid the version 12.5.0.0.0; Upgrade oracle communications_pricing_design_center to a higher version than 12.0.0.4.0,12.0.0.5.0,and avoid the version 12.0.0.4.0,12.0.0.5.0; Upgrade oracle communications_service_broker to a higher version than 6.2,and avoid the version 6.2; Upgrade oracle enterprise_communications_broker to a higher version than 3.3,and avoid the version 3.3; Upgrade oracle enterprise_session_border_controller to a higher version than 8.4,9.0,and avoid the version 8.4,9.0; Upgrade oracle financial_services_analytical_applications_infrastructure to a higher version than 8.1.1,and avoid the version [8.0.7,8.1.1]; Upgrade oracle financial_services_model_management_and_governance to a higher version than 8.1.1,and avoid the version [8.0.8,8.1.1]; Upgrade oracle flexcube_core_banking to a higher version than 11.8.0,5.2.0,11.10.0,and avoid the version [11.6.0,11.8.0],5.2.0,11.10.0; Upgrade oracle fusion_middleware_mapviewer to a higher version than 12.2.1.4.0,and avoid the version 12.2.1.4.0; Upgrade oracle health_sciences_data_management_workbench to a higher version than 2.5.2.1,3.0.0.0,and avoid the version 2.5.2.1,3.0.0.0; Upgrade oracle health_sciences_information_manager to a higher version than 3.0.4,and avoid the version [3.0.1,3.0.4]; Upgrade oracle healthcare_data_repository to a higher version than 8.1.0,and avoid the version 8.1.0; Upgrade oracle helidon to a higher version than 1.4.7,2.2.0,and avoid the version 1.4.7,2.2.0; Upgrade oracle insurance_policy_administration to a higher version than 11.0.2,11.1.0,11.2.8,11.3.0,11.3.1,and avoid the version 11.0.2,11.1.0,11.2.8,11.3.0,11.3.1; Upgrade oracle insurance_rules_palette to a higher version than 11.0.2,11.1.0,11.2.8,11.3.0,11.3.1,and avoid the version 11.0.2,11.1.0,11.2.8,11.3.0,11.3.1; Upgrade oracle oss_support_tools to a higher version than 2.12.42,and avoid the version (,2.12.42); Upgrade oracle primavera_unifier to a higher version than 17.12,18.8,19.12,20.12,21.12,and avoid the version [17.7,17.12],18.8,19.12,20.12,21.12; Upgrade oracle real_user_experience_insight to a higher version than 13.4.1.0,13.5.1.0,and avoid the version 13.4.1.0,13.5.1.0; Upgrade oracle rest_data_services to a higher version than 21.2,21.3,and avoid the version (,21.2),21.3; Upgrade oracle retail_assortment_planning to a higher version than 16.0.3,and avoid the version 16.0.3; Upgrade oracle retail_integration_bus to a higher version than 16.0.3,13.0,14.1.3.0,14.1.3.2,15.0.3.1,19.0.0,19.0.1,and avoid the version [16.0.1,16.0.3],13.0,14.1.3.0,14.1.3.2,15.0.3.1,19.0.0,19.0.1; Upgrade oracle retail_merchandising_system to a higher version than 16.0.3,19.0.1,and avoid the version 16.0.3,19.0.1; Upgrade oracle retail_order_broker to a higher version than 16.0,18.0,19.1,and avoid the version 16.0,18.0,19.1; Upgrade oracle retail_pricing to a higher version than 19.0.1,and avoid the version 19.0.1; Upgrade oracle retail_service_backbone to a higher version than 16.0.3,14.1.3.0,14.1.3.2,15.0.3.1,19.0.0,19.0.1,and avoid the version [16.0.1,16.0.3],14.1.3.0,14.1.3.2,15.0.3.1,19.0.0,19.0.1; Upgrade oracle retail_size_profile_optimization to a higher version than 16.0.3,and avoid the version 16.0.3; Upgrade oracle retail_xstore_point_of_service to a higher version than 17.0.4,18.0.3,19.0.2,20.0.1,and avoid the version 17.0.4,18.0.3,19.0.2,20.0.1; Upgrade oracle solaris_cluster to a higher version than 4.0,and avoid the version 4.0; Upgrade oracle utilities_testing_accelerator to a higher version than 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1,and avoid the version 6.0.0.1.1,6.0.0.2.2,6.0.0.3.1; Upgrade oracle webcenter_portal to a higher version than 12.2.1.3.0,12.2.1.4.0,and avoid the version 12.2.1.3.0,12.2.1.4.0; Upgrade oracle weblogic_server to a higher version than 12.1.3.0.0,12.2.1.3.0,12.2.1.4.0,14.1.1.0.0,and avoid the version 12.1.3.0.0,12.2.1.3.0,12.2.1.4.0,14.1.1.0.0; Upgrade netapp active_iq_unified_manager to a higher version than -