tocsin

Debian/hiki: unknown

Directory traversal vulnerability in session.rb in Hiki 0.8.0 through 0.8.6 allows remote attackers to delete arbitrary files via directory traversal sequences in the session ID, which is matched agai

Action: Upgrade hiki to 0.8.7-1 or later.

Affected

introducedfixedlast affected
00.8.7-1-

Fixed versions

0.8.7-1

Sources

published · modified · JSON