Lucene search
+L

3 matches found

OSV
OSV
added 2021/05/27 6:41 p.m.9 views

GHSA-QMFX-75FF-8MW6 Listing of upload directory contents possible

There's an security issue in prosody-filer versions 1.0.1 which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other than /upload/ or the corresponding user defined...

7.1AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2021/05/27 6:41 p.m.34 views

Listing of upload directory contents possible

There's an security issue in prosody-filer versions 1.0.1 which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other than /upload/ or the corresponding user defined...

3.6AI score
SaveExploits0References2Affected Software1
GitLab Advisory Database
GitLab Advisory Database
added 2021/05/27 12:0 a.m.13 views

Listing of upload directory contents possible

There's an security issue in prosody-filer versions 1.0.1 which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other than /upload/ or the corresponding user defined...

3.6AI score
SaveExploits0References2Affected Software1
Rows per page
Query Builder