CVE-2017-16189

CVE-2017-16189 concerns the sly07 API for censoring text, which is vulnerable to a directory traversal flaw. The vulnerability is triggered by crafted URL paths containing sequences like "../" (and variants) that allow an attacker to access files outside the intended directory root, potentially e...