CVE-2017-16106

CVE-2017-16106 : The static file server tmock is vulnerable to a directory traversal via URLs containing ".. /", allowing access to the filesystem (e.g., reading /etc/passwd). Several connected advisories confirm this issue and indicate there is no patch available ; the guidance is to restrict tm...

CVE-2017-16106

tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...