Kojoney 0.0.4.1 - 'urllib.urlopen()' Remote Denial of Service Vulnerability

source: http://www.securityfocus.com/bid/38395/info
 
Kojoney is prone to a remote denial-of-service vulnerability.
 
A remote attacker can exploit this issue to gain unauthorized access to local files and crash the affected application, resulting in a denial-of-service condition.
 
Versions prior to Kojoney 0.0.4.2 are vulnerable.
 
The following example URI is available:
 
file://localhost/dev/urandom

#  0day.today [2018-03-09]  #