7 matches found
CVE-2026-72571
A path traversal vulnerability in mustafaakin/cast-localvideo all versions allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler at lines 151-153 passes the user-supplied req.body.dir parameter directly to res.sendFile without sanitization, enabling...
CVE-2026-72571
A path traversal vulnerability in mustafaakin/cast-localvideo all versions allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler at lines 151-153 passes the user-supplied req.body.dir parameter directly to res.sendFile without sanitization, enabling...
CVE-2026-72571 mustafaakin cast-localvideo - Unauthenticated Path Traversal via dir Parameter
A path traversal vulnerability in mustafaakin/cast-localvideo all versions allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler at lines 151-153 passes the user-supplied req.body.dir parameter directly to res.sendFile without sanitization, enabling...
EUVD-2026-55235
A path traversal vulnerability in mustafaakin/cast-localvideo all versions allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler at lines 151-153 passes the user-supplied req.body.dir parameter directly to res.sendFile without sanitization, enabling...
CVE-2026-72571 mustafaakin cast-localvideo - Unauthenticated Path Traversal via dir Parameter
A path traversal vulnerability in mustafaakin/cast-localvideo all versions allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler at lines 151-153 passes the user-supplied req.body.dir parameter directly to res.sendFile without sanitization, enabling...
CVE-2026-72571: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability in mustafaakin/cast-localvideo all versions allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler at lines 151-153 passes the user-supplied req.body.dir parameter directly to res.sendFile without sanitization, enabling...
PT-2026-69455
Name of the Vulnerable Software and Affected Versions mustafaakin/cast-localvideo affected versions not specified Description A path traversal issue allows an unauthenticated remote attacker to read arbitrary files from the server. The app.js handler passes the user-supplied req.body.dir paramete...