Webp Server Go - Path Traversal File Read

Reads arbitrary files via path traversal in Webp Server Go github.com/webp-sh/webpservergo. !/usr/bin/env python3 -- coding: utf-8 -- """Webp Server Go path traversal file read.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient from lib.protocols.http.lfi import Lfi...

Webp Server Go - Path Traversal Detection

Webp Server Go has an Path Traversal vulnerability. Attackers can use the vulnerability to access arbitraty file. !/usr/bin/env python3 -- coding: utf-8 -- """Webp Server Go has an Path Traversal vulnerability.""" import re from kittysploit import from lib.protocols.http.httpclient import...

CVE-2026-53779

WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMGPATH directory by sending requests with percent-encoded backslashes %5C that bypass the path.Clean sanitization in handler/router.go...

EUVD-2026-38340

WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMGPATH directory by sending requests with percent-encoded backslashes %5C that bypass the path.Clean sanitization in handler/router.go...

CVE-2026-53779 WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows

WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMGPATH directory by sending requests with percent-encoded backslashes %5C that bypass the path.Clean sanitization in handler/router.go...

CVE-2026-53779 WebP Server Go < 0.15.0 Path Traversal via Backslash Encoding on Windows

WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMGPATH directory by sending requests with percent-encoded backslashes %5C that bypass the path.Clean sanitization in handler/router.go...

CVE-2026-53779

WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMGPATH directory by sending requests with percent-encoded backslashes %5C that bypass the path.Clean sanitization in handler/router.go...

CVE-2026-53779: Improper Limitation of a Pathname to a Restricted Directory

WebP Server Go through 0.14.4 contains a path traversal vulnerability on Windows that allows unauthenticated attackers to read files outside the configured IMGPATH directory by sending requests with percent-encoded backslashes %5C that bypass the path.Clean sanitization in handler/router.go...

CVE-2021-46104

An issue was discovered in webpservergo 0.4.0. There is a directory traversal vulnerability that can read arbitrary file information on the server...

PT-2022-12568

Name of the Vulnerable Software and Affected Versions webp server go version 0.4.0 Description An issue was discovered in the software, which is a directory traversal vulnerability that can read arbitrary file information on the server. Recommendations For webp server go version 0.4.0, consider...

Webp_Server_Go path traversal vulnerability

WebpServerGo is a Go version of WebP Server. It is used to instantly compress Jpg/Png into WebP format. A path traversal vulnerability exists in WebpServerGo version 0.4.0, which stems from a lack of filtering and escaping of directory special characters in the software, resulting in a directory...