6 matches found
EUVD-2026-120520
Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handlerequest that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../ to bypass the '/../' substring che...
CVE-2026-125357
Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handlerequest that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../ to bypass the '/../' substring che...
CVE-2026-125357: munin-monitoring munin: Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of…
Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handlerequest that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../ to bypass the '/../' substring che...
CVE-2026-125357 Munin munin-httpd through 2.999.18 Path Traversal via Static File Handler
Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handlerequest that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../ to bypass the '/../' substring che...
CVE-2026-125357
The Munin munin-httpd server versions 2.99.1 through 2.999.18 are susceptible to a path traversal vulnerability in the Munin::Master::HTML::handle_request static file handler. This flaw allows unauthenticated attackers to bypass the /../ substring check by requesting /static/../. Successful explo...
PT-2026-141178
Munin munin-httpd 2.99.1 through 2.999.18 contains a path traversal vulnerability in the static file handler of Munin::Master::HTML::handle request that allows unauthenticated attackers to read files outside the static directory. Attackers can request /static/../ to bypass the '/../' substring...