Lucene search
+L

8 matches found

Nuclei
Nuclei
•added 2026/11/01 2:03 a.m.•10 views

GravitLauncher LaunchServer <=5.7.11 - Unauthenticated Path Traversal to Arbitrary File Read

LaunchServer's Netty FileServerHandler computes the served path by stripping one leading character on the assumption that every request-target begins with '/'. Netty's HttpServerCodec accepts a request-target without a leading slash verbatim, so a request without a leading slash bypasses path...

9.8CVSS6AI score0.03457EPSS
SaveExploits0References2
Rows per page
Query Builder