PT-2026-85157

Mongoose is an embedded web server and network library. Prior to 7.22, an attacker who can control an SSI-enabled file can place directory traversal sequences in an include file or include virtual directive. The mg ssi function in src/ssi.c concatenates the directive argument into a filesystem pa...