CVE-2017-15607

Inedo Otter prior to version 1.7.4 contains a directory traversal vulnerability in filesystem-based rafts, exploitable via vectors that involve '/' characters or an initial '.' character (OT-181). Affected product: Inedo Otter. Root cause: directory traversal in raft filesystem handling. Public r...