FreeBSD : routinator -- Possible path traversal when storing RRDP responses (ea9d1fd2-5d24-11ee-8507-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ea9d1fd2-5d24-11ee-8507-b42e991fc52e advisory. - NLnet Labs' Routinator 0.9.0 up to and including 0.12.1 contains a possible path traversal...

CVE-2023-39916

NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as well as 0.14.0 up to and including 0.14.2 contains a possible path traversal vulnerability in the optional, off-by-default keep-rrdp-responses feature that allows users to store the content of responses received for RRDP requests. The...

CVE-2023-39916 Possible path traversal when storing RRDP responses

NLnet Labs’ Routinator 0.9.0 up to and including 0.12.1 as well as 0.14.0 up to and including 0.14.2 contains a possible path traversal vulnerability in the optional, off-by-default keep-rrdp-responses feature that allows users to store the content of responses received for RRDP requests. The...

CVE-2023-39916

NLnet Labs Routinator 0.9.0–0.12.1 and 0.14.0–0.14.2 contain a path traversal vulnerability in the optional keep-rrdp-responses feature. The flaw allows an attacker to craft RRDP request URLs that cause stored responses to be written outside the intended directory due to insufficient URL sanitati...