CVE-2017-16038

CVE-2017-16038 concerns the f2e-server project: versions 1.12.11 and earlier suffer a directory traversal vulnerability in URL path handling, allowing an attacker to access files outside the intended root by inserting ../../ in the request. The issue arises from insufficient validation of user-su...