tocsin

Debian/aria2: unknown

Directory traversal vulnerability in aria2 before 1.9.3 allows remote attackers to create arbitrary files via directory traversal sequences in the name attribute of a file element in a metalink file.

Action: Upgrade aria2 to 1.9.3-1 or later.

Affected

introducedfixedlast affected
01.9.3-1-

Fixed versions

1.9.3-1

Sources

published · modified · JSON