Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:27537
HistoryOct 07, 2020 - 12:40 a.m.

Directory Traversal

2020-10-0700:40:18
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.001 Low

EPSS

Percentile

31.9%

xmpp_http_upload is vulnerable to directory traversal. The vulnerability exists through the unsafe implementation of sanitized_join, where the .. input can be used to bypass the application root directory.

CPENameOperatorVersion
xmpp-http-uploadle0.3.0

0.001 Low

EPSS

Percentile

31.9%

Related for VERACODE:27537