GHSA-J5MG-FPQ8-VVXV Directory Traversal in commentapp.stetsonwood

Affected versions of commentapp.stetsonwood resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable...

CVE-2017-16143

commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16143

This CVE (CVE-2017-16143) is documented across multiple sources as a directory traversal vulnerability in the HTTP server commentapp.stetsonwood. An attacker can cause file-system access by crafting URLs with ../ sequences (for example, ../../../../../etc/passwd). The issue is described consisten...

CVE-2017-16143

commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16143

commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16143: Improper Limitation of a Pathname to a Restricted Directory

commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

PT-2018-6170

Name of the Vulnerable Software and Affected Versions: commentapp.stetsonwood affected versions not specified Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, enabling the attack...