Potential Local File Read Vulnerability in JVM Based Application

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•1•0•24

This rule detects potential local file read vulnerabilities in JVM-based applications by looking for specific keywords in application error logs. It triggers when a 'FileNotFoundException' occurs in conjunction with path traversal payloads like '/../../..'. This combination suggests an attacker is attempting to read arbitrary files from the system by manipulating input paths, which could lead to sensitive information disclosure.