Warpinator through 1.2.14 allows access outside of an intended directory, as demonstrated by symbolic directory links.
7.5CVSS
7.5AI Score
0.002EPSS
Warpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames.
7.5CVSS
7.5AI Score
0.003EPSS