CVE-2019-15516

CVE-2019-15516 concerns Cuberite prior to 2019-06-11. The vulnerability is a webadmin directory traversal caused by a flawed protection check that only removes a single “../” substring, potentially allowing an attacker to access locations outside a restricted directory. The description provides n...

CVE-2019-15516

Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring...