EUVD-2018-0233

Malware in sbrugna...

Directory traversal

utahcityfinder constructs lists of Utah cities with a certain prefix. utahcityfinder is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16173

CVE-2017-16173 affects utahcityfinder, a package for listing Utah cities. A directory traversal vulnerability arises when a URL containing ../ sequences is processed, allowing an attacker to access filesystem paths outside the intended directory root. Multiple sources (GHSA, OSV, CNVD, CNVD-relat...