Directory Traversal in tinyserver2

Affected versions of tinyserver2 resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Exampl...

GHSA-G8WF-RCG3-QW4Q Directory Traversal in tinyserver2

Affected versions of tinyserver2 resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Exampl...

Tinyserver2 Directory Traversal Vulnerability

tinyserver2 is a static content server. A directory traversal vulnerability exists in tinyserver2. An attacker can exploit this vulnerability to gain access to the file system by placing a '... /' sequence in a URL to gain access to the file system...

Directory Traversal

tinyserver2 is vulnerable to directory traversal attacks. This attacks is possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

CVE-2017-16085

tinyserver2 is a webserver for static files. tinyserver2 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16085

tinyserver2 is a webserver for static files. tinyserver2 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16085

tinyserver2 is a webserver for static files. tinyserver2 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

CVE-2017-16085

CVE-2017-16085 affects the tinyserver2 static-file webserver. The vulnerability is a directory traversal flaw exposed by requests that use path components like "../../" in the URL, allowing an attacker to access files outside the intended document root. Impact is partial confidentiality (filesyst...

CVE-2017-16085: Improper Limitation of a Pathname to a Restricted Directory

tinyserver2 is a webserver for static files. tinyserver2 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL...

PT-2018-6114

Name of the Vulnerable Software and Affected Versions: tinyserver2 versions prior to 0.6.0 Description: The issue allows an attacker to access the filesystem by exploiting a directory traversal vulnerability. This can be achieved by placing "../" in the URL, giving access to files outside of the...