CVE-2020-15239

Summary: CVE-2020-15239 affects xmpp-http-upload prior to version 0.4.0. The issue allows directory traversal via GET requests to read ".data" files paired with ".meta" JSON metadata, enabling information disclosure and potentially bypassing access controls in multi-instance deployments. The ".da...