title: Red Hat Security Advisory: icedtea-web security update
description: icedtea-web: unsigned code injection in a signed JAR file icedtea-web: path traversal while processing <jar/> elements of JNLP files results in arbitrary file overwrite icedtea-web: directory traversal in the nested jar auto-extraction leading to arbitrary file overwrite
cpes: cpe:/a:redhat:enterprise_linux:8::appstream