CVE-2017-16173

CVE-2017-16173 affects utahcityfinder, a package for listing Utah cities. A directory traversal vulnerability arises when a URL containing ../ sequences is processed, allowing an attacker to access filesystem paths outside the intended directory root. Multiple sources (GHSA, OSV, CNVD, CNVD-relat...