CVE-2019-16903

2019-09-2611:15:13

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%

Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /… where it should be checking for …/ instead.

CPENameOperatorVersion
platinumeq1.1.1
platinumeq1.0.9
platinumeq1.0.9.2
platinumeq1.2.0
platinumeq1.1.0

Name	Operator	Version
platinum	eq	1.1.1
platinum	eq	1.0.9
platinum	eq	1.0.9.2
platinum	eq	1.2.0
platinum	eq	1.1.0

References

www.iwantacve.cn/index.php/archives/349/

github.com/plutinosoft/Platinum/issues/22