Lucene search

K
osvGoogleOSV:GHSA-XQQR-P362-6RMC
HistoryNov 09, 2018 - 5:44 p.m.

Directory Traversal in hostr

2018-11-0917:44:20
Google
osv.dev
10

EPSS

0.002

Percentile

56.9%

Affected versions of hostr are vulnerable to directory traversal which allows attackers to read files outside the current directory by sending ../ in the url path for GET requests.

Recommendation

Upgrade to version 2.3.6 or later.

EPSS

0.002

Percentile

56.9%

Related for OSV:GHSA-XQQR-P362-6RMC