Twonky Server Directory Traversal Vulnerability

Twonky Server is the industry-leading DLNA/UPnP media server from Lynx Technology that enables the sharing of media content between connected devices. A directory traversal vulnerability exists in Twonky Server. A remote attacker could use the contentbase parameter of rpc/setall in the ... double...

CVE-2018-7171

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. dot dot in the contentbase parameter to rpc/setall...

PT-2018-17927

Name of the Vulnerable Software and Affected Versions Twonky Server versions 7.0.11 through 8.5 Description The issue allows remote attackers to share the contents of arbitrary directories. This is achieved by using a .. dot dot in the contentbase parameter to the "rpc/set all" endpoint...

CVE-2018-7171: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. dot dot in the contentbase parameter to rpc/setall...