Directory traversal

2019-09-2611:15:00

PRIOn knowledge base

www.prio-n.com

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.0%

Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /… where it should be checking for …/ instead.

CPENameOperatorVersion
platinumeq1.2.0

CPE	Name	Operator	Version
	platinum	eq	1.2.0

References

www.iwantacve.cn/index.php/archives/349/

github.com/plutinosoft/Platinum/issues/22