CVE-2019-0207

Tapestry processes assets `/assets/ctx` using classes chain `StaticFilesFilter -> AssetDispatcher -> ContextResource`, which doesn’t filter the character “, so attacker can perform a path traversal attack to read any files on Windows platform.

Source: CVE-2019-0207