Astra Linux – vulnerability in Erlang

An incorrect authorization vulnerability in Erlang OTP inets modules allows unauthenticated access to CGI scripts protected by directory rules when they are served via scriptalias. When scriptalias maps a URL prefix to a directory outside DocumentRoot, modauth evaluates directory-based access...