CVE-2019-17199

www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal for reading arbitrary files because of an unanchored regular expression, as demonstrated by the a.jpg\.. substring...

CVE-2019-17199

www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal for reading arbitrary files because of an unanchored regular expression, as demonstrated by the a.jpg.. substring...

CVE-2019-17199

CVE-2019-17199 affects WPO WebPageTest 19.04 on Windows via www/getfile.php, where an unanchored regular expression permits Directory Traversal (reading arbitrary files), as demonstrated by the a.jpg.. substring. The issue is triggered in the vulnerable file/component (getfile.php) and weaponizes...