Lucene search
PRIOn knowledge basePRION:CVE-2020-16136HistoryJul 31, 2020 - 4:15 p.m.
Directory traversal
2020-07-3116:15:00
PRIOn knowledge base
www.prio-n.com
2
In tgstation-server 4.4.0 and 4.4.1, an authenticated user with permission to download logs can download any file on the server machine (accessible by the owner of the server process) via directory traversal …/ sequences in /Administration/Logs/ requests. The attacker is unable to enumerate files, however.
| CPE | Name | Operator | Version |
|---|---|---|---|
| tgstation-server | eq | 4.4.1 | |
| tgstation-server | eq | 4.4.0 |
Related
nvd
nvd
CVE-2020-16136
2020-07-31 16:15:11
osv
osv
CVE-2020-16136
2020-07-31 16:15:11
cve
cve
CVE-2020-16136
2020-07-31 16:15:11
cvelist
cvelist
CVE-2020-16136
2020-07-31 15:01:07