EUVD-2019-0363

Malware in sbrugna...

GHSA-XG5R-8J97-2WRJ Directory Traversal in restafary

Affected versions of restafary are susceptible to a directory traversal vulnerability when a root path is specified in the configuration. Proof of Concept curl -i -s -k -X 'GET' -H 'Authorization: Basic YWRtaW46cGFzc3dvcmQ=' 'http://localhost:8000/api/v1/fs/..%2f..%2fetc/passwd' Recommendation...

Directory Traversal in restafary

Affected versions of restafary are susceptible to a directory traversal vulnerability when a root path is specified in the configuration. Proof of Concept curl -i -s -k -X 'GET' -H 'Authorization: Basic YWRtaW46cGFzc3dvcmQ=' 'http://localhost:8000/api/v1/fs/..%2f..%2fetc/passwd' Recommendation...

Restafary Path Traversal Vulnerability

Restafary is a program for GRUD file manipulation. A path traversal vulnerability exists in Restafary versions prior to 1.6.1, which stems from the fact that restafary can be run at a path other than the specified root path. No details of the vulnerability are provided at this time...

CVE-2016-10528

restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified...

CVE-2016-10528

restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified...

CVE-2016-10528

restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified...

CVE-2016-10528

CVE-2016-10528 affects the restafary REST file API. Affected versions prior to 1.6.1 allow a configured root path to be bypassed, enabling directory traversal when accessing files outside the intended root. The vulnerability is demonstrated by examples in public advisories (e.g., GHSA and related...

Directory Traversal

Overview Affected versions of restafary are susceptible to a directory traversal vulnerability when a root path is specified in the configuration. Proof of Concept curl -i -s -k -X 'GET' -H 'Authorization: Basic YWRtaW46cGFzc3dvcmQ=' 'http://localhost:8000/api/v1/fs/..%2f..%2fetc/passwd'...