4 matches found
UBUNTU-CVE-2018-19052
An issue was discovered in modaliasphysicalhandler in modalias.c in lighttpd before 1.4.50. There is potential ../ path traversal of a single directory above an alias target, with a specific modalias configuration where the matched alias lacks a trailing '/' character, but the alias target...
7.5CVSS6.9AI score0.1408EPSS
SaveExploits1References4
PT-2018-3498 · Lighttpd +3 · Lighttpd +3
Name of the Vulnerable Software and Affected Versions: lighttpd versions prior to 1.4.50 Description: An issue was discovered in mod alias physical handler in mod alias.c, allowing potential ../ path traversal of a single directory above an alias target. This occurs with a specific mod alias...
7.8CVSS7AI score0.1408EPSS
SaveExploits7References42
20