Lucene search
+L
Wind-mvc ProjectWind-mvc

1 matches found

CVE
CVE
added 2018/06/07 2:00 a.m.60 views

CVE-2017-16220

CVE-2017-16220 affects the wind-mvc framework and is a directory traversal vulnerability that allows an attacker to access the filesystem by placing "../" in the URL. Multiple connected sources (GHSA-7G8M-5QH9-9PGW, Veracode, OSV) state that affected wind-mvc versions have this issue and that no ...

7.5CVSS7.4AI score0.02005EPSS
Save