CVE-2017-16038

f2e-server 1.12.11 and earlier is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. This is compounded by f2e-server requiring elevated privileges to run...

CVE-2017-16038

CVE-2017-16038 concerns the f2e-server project: versions 1.12.11 and earlier suffer a directory traversal vulnerability in URL path handling, allowing an attacker to access files outside the intended root by inserting ../../ in the request. The issue arises from insufficient validation of user-su...