PT-2018-3498

Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.50 Description: An issue was discovered in mod alias physical handler in mod alias.c, allowing potential ../ path traversal of a single directory above an alias target. This occurs with a specific mod alias...