GO-2021-0051

2021-04-14T12:00:00
ID OSV:GO-2021-0051
Type osv
Reporter Google
Modified 2021-04-14T12:00:00

Description

Due to improper santization of user input on Windows, the static file handler allows for directory traversal, allowing an attacker to read files outside of the target directory that the server has permission to read.