GHSA-8XJ3-7258-W4Q2 Directory Traversal in dasafio

Affected versions of dasafio resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

Directory Traversal in dasafio

Affected versions of dasafio resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example...

CVE-2017-16179

dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. File access is restricted to only .html files...

CVE-2017-16179

dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. File access is restricted to only .html files...

Directory traversal

dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. File access is restricted to only .html files...

CVE-2017-16179

dasafio is a web server. dasafio is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. File access is restricted to only .html files...

CVE-2017-16179

The CVE refers to a directory traversal vulnerability in the dasafio web server. Connected advisories confirm that certain versions of dasafio expose directory traversal by resolving relative file paths (e.g., ../../../../../../etc/passwd) and can disclose private files outside the intended root....

Directory Traversal

Overview Affected versions of dasafio resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system...