CVE-2014-5269

CVE-2014-5269 affects Plack before 1.0031, specifically Plack::App::File. The flaw: trailing slashes are stripped from paths, which can bypass the whitelist used by Plack::Middleware::Static and lead to unintended delivery of sensitive files. The issue is documented in multiple advisories (Debian...