CVE-2019-12276

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. A patch for this issue was made...

CVE-2019-12276

GrandNode 4.40 is affected by a Local File Inclusion (path traversal) in Controllers/LetsEncryptController.cs. Remote, unauthenticated attackers could retrieve arbitrary files on the web server via letsEncrypt/Index?fileName= requests. The issue is mitigated by a patch released on 2019-05-30 in G...

CVE-2019-12276: Improper Limitation of a Pathname to a Restricted Directory

A Path Traversal vulnerability in Controllers/LetsEncryptController.cs in LetsEncryptController in GrandNode 4.40 allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted LetsEncrypt/Index?fileName= HTTP requests. A patch for this issue was made...

PT-2019-12728

Name of the Vulnerable Software and Affected Versions GrandNode version 4.40 Description A Path Traversal issue allows remote, unauthenticated attackers to retrieve arbitrary files on the web server via specially crafted "LetsEncrypt/Index?fileName=" HTTP requests. Recommendations For GrandNode...