2 matches found
GHSA-CGJV-RGHQ-QHGP Path Traversal in algo-httpserv
Versions of algo-httpserv prior to 1.1.2 are vulnerable to Path Traversal. Due to insufficient input sanitization, attackers can access server files by using relative paths. Recommendation Upgrade to version 1.1.2 or later...
Directory Traversal
algo-httpserv is vulnerable to directory traversal. A lack of validation in the URI allows a remote attacker to inject ../ characters in the URI to retrieve system files such as /etc/passwd, or potentially cause a system crash by accessing /dev/null...