0.004 Low
EPSS
Percentile
75.2%
public is vulnerable to directory traversal attacks. The vulnerability exists as public did not check if the provided path starts from the server’s directory, allowing users to specify a file path out of the server’s scope.
github.com/tnantoka/public/commit/eae8ad8017b260f8667ded5e12801bd72b877af2
hackerone.com/reports/312918