4 matches found
UBUNTU-CVE-2018-19052
An issue was discovered in modaliasphysicalhandler in modalias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific modalias configuration where the matched alias lacks a trailing '/' character, but the alias target...
7.5CVSS6.9AI score0.13714EPSS
SaveExploits1References4
PT-2018-3498
Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.50 Description: An issue was discovered in mod alias physical handler in mod alias.c, allowing potential ../ path traversal of a single directory above an alias target. This occurs with a specific mod alias...
7.8CVSS6.9AI score0.13714EPSS
SaveExploits1References34
20