PT-2023-1983

Name of the Vulnerable Software and Affected Versions Roxy-WI versions prior to 6.3.6.0 Description The issue is related to the Roxy-WI web interface for managing servers, which fails to correctly neutralize dir/../filename sequences. This allows an actor to gain information about a server. For...

CVE-2023-25802: Path Traversal: '/dir/../filename'

Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't correctly neutralize dir/../filename sequences, such as /etc/nginx/../passwd, allowing an actor to gain information about a server. Version 6.3.6.0 has a patch for this issue...