CVE-2021-41773

CVE-2021-41773 Apache HTTP Server 2.4.49에서의 경로 순회 및 파일 공개 취약점 CVE-2021-41773 정보 Apache HTTP Server 2.4.49의 경로 정규화 변경에서 결함이 발견되었습니다. 공격자는 경로 순회 공격을 사용하여 URL을 예상 문서 루트 외부의 파일에 매핑할 수 있습니다. 문서 루트 외부의 파일이 "require all denied"로 보호되지 않으면 이러한 요청이 성공할 수 있습니다. 또한 이 결함은 CGI 스크립트와 같은 해석된 파일의 소스를 유출할 수 있습니다. ...

PoC-CVE-2021-41773

CVE-2021-41773 PoC Доказательство концепции для проверки, уязвимы ли хосты для CVE-2021-41773. Описание https://vulners.com/cve/CVE-2021-41773 Ошибка была обнаружена в изменении, внесённом в нормализацию путей в Apache HTTP Server 2.4.49-2.4.50. Злоумышленник может использовать атаку path travers...

CTF_WRITEUPS-TryHackMe-CVE-2021-41773-

CTFWRITEUPS-TryHackMe-CVE-2021-41773- CTFWRITEUPS/TryHackMe /CVE-2021-41773/ CVE-2021-41773/42013 Небольшое объяснение ошибки обхода путей Apache и неполного исправления Task 1: Немного предыстории... Краткая история 5 октября 2021 года был опубликован CVE, описывающий атаку обхода путей на Apach...

CVE-2026-64836

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check validation function compares realpath to boolean true, which never succeeds, allowing authenticated attackers to submit...

EUVD-2026-75455

ICEcoder versions through 8.1 fail to properly validate the oldFileName parameter in file move and rename operations, allowing authenticated users to relocate files from outside the document root. Attackers can use path traversal sequences in oldFileName to move files writable by the PHP process...

CVE-2026-64836 ICEcoder through 8.1 Path Traversal via Ineffective File::check() Confinement

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check validation function compares realpath to boolean true, which never succeeds, allowing authenticated attackers to submit...

CVE-2026-64836

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint. The root cause is a logic error in the File::check() validation function, which compares realpath() to boolean true—a condition that never succeeds, effectively disabling the document-root confineme...

EUVD-2026-75453

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check validation function compares realpath to boolean true, which never succeeds, allowing authenticated attackers to submit...

PT-2026-89417

ICEcoder versions through 8.1 contain a path traversal vulnerability in the file-control endpoint due to a logic error in the document-root confinement check. The File::check validation function compares realpath to boolean true, which never succeeds, allowing authenticated attackers to submit...

CVE-2021-41773

CVE-2021-41773 Apache HTTP Server 2.4.49-2.4.50의 경로 정규화 변경에서 결함이 발견되었습니다. 공격자는 경로 탐색path traversal 공격을 이용해 URL을 예상 문서 루트document root 밖의 파일에 매핑할 수 있습니다. 문서 루트 외부의 파일이 "require all denied"로 보호되지 않으면 이러한 요청이 성공할 수 있습니다. 또한 이 결함은 CGI 스크립트와 같은 해석형interpreted 파일의 소스를 유출할 수 있습니다...

CVE-2021-41773h

CVE-2021-41773 Apache HTTP Server 2.4.49 におけるパストラバーサルおよびファイル開示の脆弱性 CVE-2021-41773 概要 Apache HTTP Server 2.4.49 のパス正規化に対する変更に欠陥が見つかりました。攻撃者はパストラバーサル攻撃を使用して、想定されたドキュメントルート外のファイルに URL をマッピングできる可能性があります。 ドキュメントルート外のファイルが「require all denied」によって保護されていない場合、これらのリクエストは成功する可能性があります。さらに、この欠陥により CGI...

CVE-2026-49970 Laravel-Mediable < 7.0.0 Path Traversal via File::sanitizePath()

Laravel-Mediable before 7.0.0 contains a path traversal vulnerability in the File::sanitizePath function that allows attackers to write uploaded files to arbitrary locations by controlling the directory argument passed to MediaUploader::toDestination. Attackers can exploit the permissive...

Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

...

EUVD-2026-38069

YARD static cache reads raw traversal paths before router sanitization...

GHSA-PXCC-8665-PHX8 YARD static cache reads raw traversal paths before router sanitization

Summary YARD's static cache lookup reads a request path before the router's path cleanup runs. When a server is configured with a document root, a traversal path such as /../yard-cache-secret.html is joined against that root and can return a readable sibling .html file outside the intended static...

CVE-2026-57436

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

CVE-2026-57436 Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

CVE-2026-57436

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

CVE-2026-57436 Nokogiri: Possible Use-After-Free when setting `Document#root=` to an invalid node type

Nokogiri is an open source XML and HTML library for the Ruby programming language. Prior to 1.19.4, Nokogiri::XML::Documentroot= validated only that the new root was a Nokogiri::XML::Node, allowing a DTD node to be set as the document root. The result is a heap use-after-free during garbage...

CVE-2026-49342

YARD is a documentation generation tool for the Ruby programming language. Prior to version 0.9.44, YARD's static cache lookup reads a request path before the router's path cleanup runs. When a server is configured with a document root, a traversal path such as /../yard-cache-secret.html is joine...