4 matches found
WS-2019-0101
Versions of algo-httpserv prior to 1.1.2 are vulnerable to Path Traversal. Due to insufficient input sanitization...
GHSA-CGJV-RGHQ-QHGP Path Traversal in algo-httpserv
Versions of algo-httpserv prior to 1.1.2 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 1.1.2 or later...
PT-2019-20037
Name of the Vulnerable Software and Affected Versions algo-httpserv versions prior to 1.1.2 Description The issue is due to insufficient input sanitization, allowing attackers to access server files by using relative paths. This can lead to a Path Traversal attack. Recommendations Upgrade to...
Directory Traversal
algo-httpserv is vulnerable to directory traversal. A lack of validation in the URI allows a remote attacker to inject ../ characters in the URI to retrieve system files such as /etc/passwd, or potentially cause a system crash by accessing /dev/null...