Zaver - Local File Inclusion

Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.. substring. id: CVE-2022-38794 info: name: Zaver - Local File Inclusion author: pikpikcu severity: high description: | Zaver through 2020-12-15 is vulnerable to local file inclusion via the GET /.. substring. impact: |...

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

Directory traversal

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

CVE-2022-38794

Zaver through 2020-12-15 allows directory traversal via the GET /.. substring...

CVE-2022-38794

Zaver (through 2020-12-15) is vulnerable to Local File Inclusion via the GET /.. substring. The connected Nuclei template confirms the flaw as a local file inclusion issue, enabling potential unauthorized access and data leakage. Impact details in the template mention possible remote code executi...

Zaver 路径遍历漏洞

Zaver is a fast and efficient HTTP server for individual developers. A security vulnerability exists in Zaver version 2020-12-15 and earlier that stems from allowing directory traversal via substrings...

PT-2022-24571 · Zaver · Zaver

Name of the Vulnerable Software and Affected Versions: Zaver versions through 2020-12-15 Description: The issue allows directory traversal via the GET /.. substring. This can be exploited through the "GET /.. substring" API endpoint. Recommendations: For versions through 2020-12-15, consider...